InseeFrLab / InseeFrLab/onyxia-api
[FEATURE REQUEST] implement control of user input based on values.schema.json
- 主要语言
- Java
- 星标
- 34
- 派生
- 34
- PR 合并指标
- 30 天内没有已合并 PR
描述
I think we should control input from the user (enforcement by default, and let admin to do no control)
In user mode there is no need to implement some control because api only use user privilege.
But some implementation can disable user access to kubernetes and in this case we should carefully handle user input.
Some controle are directly done by helm without any effort but only values in values.schema.json are controlled by helm.
贡献指南
这个仓库没有索引到贡献指南
调研方向
Start by reading values.schema.json and the existing Helm input controls, then trace how user and admin modes reach the REST API. Compare which Kubernetes access paths are covered and identify the expected enforcement and opt-out behavior. Done means user input is controlled by default while an admin can disable control, including cases where users lack Kubernetes access.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- helm, java, kubernetes
- 领域
- api, security
- Issue 类型
- 功能
- 难度
- 5/5
- 预计耗时
- 一周以上
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 25/100