Kuadrant / Kuadrant/kuadrant-operator
Use sharding for Kuadrants Authorino deployment
- Dominant language
- Go
- Stars
- 94
- Forks
- 89
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 43
Description
Currently, the Authorino deployed by Kuadrant is configured as cluster-wide and without sharding, which means it will reconcile all AuthConfigs on the cluster, which means you cannot use standalone authorino deployments on the same cluster as everything will be also reconciled by the Kuadrant Authorino.
Solution would be to deploy Kuadrant Authorino with sharding to some label like `kuadrant.io/managed=true` and add the same label to AuthConfigs generated from AuthPolicy
Contributor guide
Research direction
Read the Kuadrant Authorino deployment configuration and trace how AuthPolicies generate AuthConfigs. Confirm how Authorino sharding can target the kuadrant.io/managed=true label, then verify generated AuthConfigs receive that label so standalone Authorino deployments do not reconcile them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- authorization, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100