Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document required permissions #52

Open
jt-nti opened this issue Jul 22, 2022 · 1 comment
Open

Document required permissions #52

jt-nti opened this issue Jul 22, 2022 · 1 comment
Labels
documentation Improvements or additions to documentation
Milestone

Comments

@jt-nti
Copy link
Member

jt-nti commented Jul 22, 2022

The following is more than strictly necessary but a good starting point...

---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: fabric-builder-k8s-role
rules:
  - apiGroups:
      - ""
      - apps
    resources:
      - pods
      - deployments
      - configmaps
      - secrets
    verbs:
      - get
      - list
      - watch
      - create
      - delete
      - patch

Need to document the minimum verbs required for each resource and how to apply the permissions to the peer's service account.

Include example kubectl auth can-i commands to check for the required permissions.

@jt-nti jt-nti added hacktoberfest documentation Improvements or additions to documentation labels Sep 27, 2022
@jt-nti
Copy link
Member Author

jt-nti commented Sep 30, 2022

If you're here for hacktoberfest and have any questions, get in touch on our fabric-hacktoberfest Discord channel!

@jt-nti jt-nti mentioned this issue Jan 6, 2023
8 tasks
@jt-nti jt-nti added this to the Version 1 milestone Jan 6, 2023
@jt-nti jt-nti changed the title Document required permissions in readme Document required permissions Feb 2, 2024
jt-nti added a commit to jt-nti/fabric-builder-k8s that referenced this issue May 24, 2024
The latest implementation uses jobs

Still need to work out the exact permissions required- see hyperledger-labs#52

Signed-off-by: James Taylor <[email protected]>
jt-nti added a commit that referenced this issue May 24, 2024
The latest implementation uses jobs

Still need to work out the exact permissions required- see #52

Signed-off-by: James Taylor <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

1 participant