Kuadrant / Kuadrant/authorino-operator
Expose Kubernetes client QPS/Burst knobs in Authorino CR
- Dominant language
- Go
- Stars
- 17
- Forks
- 32
- Avg merge
- 2d 20h
- Merged PRs (30d)
- 10
Description
**Is your feature request related to a problem? Please describe.**
Authorino performs kube-apiserver calls to evaluate permissions (e.g. for `SubjectAccessReview`/ k8s RBAC).
While the underlying issue of low/default Kubernetes client QPS/Burst for SAR calls was fixed via the PR tracked in https://github.com/Kuadrant/authorino/issues/568, the limits remain are not easily configurable by users (e.g. directly using env vars or flags in Authorino Deployment).
**Describe the solution you'd like**
Expose configuration knobs in the Authorino CR to tune the Kubernetes client rate limits used for internal calls. We could either expose direct knobs or introduce PodSpecTemplate to allow more direct customizations of underlying Authorino Deployment.
Contributor guide
Research direction
The issue names the Authorino CR and the managed Authorino Deployment but no files or tests. Start by locating the CR definition and the code that generates the Deployment, then determine whether direct rate-limit fields or a PodSpecTemplate fits the existing API. Done means users can configure Kubernetes client QPS and Burst through the Authorino CR and the resulting Deployment uses those values.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100