Enhance CheckServiceAccountPermission to validate each resource
- Dominant language
- Go
- Stars
- 927
- Forks
- 387
- Avg merge
- 15h 5m
- Merged PRs (30d)
- 36
Description
### Requirement
The func `CheckServiceAccountPermission` is used to validate possible cross namespace resource (in Pipe bindings and Kamelets) are trusted by the SA. We should enhance and add a check for each resource name, and not generically just the resource Kind.
Contributor guide
No contributing guide indexed for this repository
Research direction
Locate the Go implementation and callers of CheckServiceAccountPermission, especially its use with Pipe bindings and Kamelets. Read how cross-namespace resources are currently checked, then trace the related tests or add coverage for resource names. Done means each referenced resource name is validated as trusted rather than only its resource kind.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100