Track kubernetes authorization model #3

New issue

Closed

opened 2015-11-14 00:33:35 +00:00 by steveej · 0 comments

steveej commented

2015-11-14 00:33:35 +00:00

(Migrated from gitlab.com)

Attribute-based access control (ABAC)* is the kubernetes authorization model: https://github.com/kubernetes/kubernetes/blob/master/pkg/auth/authorizer/abac/abac.go

TODO:

connect to syslab users
define ABAC model for syslab

k8s TODO:

Attribute-based access control (ABAC)\* is the kubernetes authorization model: https://github.com/kubernetes/kubernetes/blob/master/pkg/auth/authorizer/abac/abac.go TODO: - [ ] connect to syslab users - [ ] define ABAC model for syslab k8s TODO: - [ ] [Have policies be created via an API call and stored in REST storage](https://github.com/kubernetes/kubernetes/blob/4386e8c/pkg/auth/authorizer/abac/abac.go#L169) - [ ] [match on verb](https://github.com/kubernetes/kubernetes/blob/4386e8c/pkg/auth/authorizer/abac/abac.go#L169)