Kuadrant / Kuadrant/authorino-operator

Expose Kubernetes client QPS/Burst knobs in Authorino CR

Open
#294 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
17
Forks
32
Avg merge
2d 20h
Merged PRs (30d)
10

Description

**Is your feature request related to a problem? Please describe.**
Authorino performs kube-apiserver calls to evaluate permissions (e.g. for `SubjectAccessReview`/ k8s RBAC).

While the underlying issue of low/default Kubernetes client QPS/Burst for SAR calls was fixed via the PR tracked in https://github.com/Kuadrant/authorino/issues/568, the limits remain are not easily configurable by users (e.g. directly using env vars or flags in Authorino Deployment).

**Describe the solution you'd like**
Expose configuration knobs in the Authorino CR to tune the Kubernetes client rate limits used for internal calls. We could either expose direct knobs or introduce PodSpecTemplate to allow more direct customizations of underlying Authorino Deployment.

Contributor guide

Open the contributing guide

Research direction

The issue names the Authorino CR and the managed Authorino Deployment but no files or tests. Start by locating the CR definition and the code that generates the Deployment, then determine whether direct rate-limit fields or a PodSpecTemplate fits the existing API. Done means users can configure Kubernetes client QPS and Burst through the Authorino CR and the resulting Deployment uses those values.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.