apache / apache/camel-k

Enhance CheckServiceAccountPermission to validate each resource

Open
#6,778 0 comments 0 reactions 0 assignees View on GitHub
kind/feature
Dominant language
Go
Stars
927
Forks
387
Avg merge
15h 5m
Merged PRs (30d)
36

Description

### Requirement

The func `CheckServiceAccountPermission` is used to validate possible cross namespace resource (in Pipe bindings and Kamelets) are trusted by the SA. We should enhance and add a check for each resource name, and not generically just the resource Kind.

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the Go implementation and callers of CheckServiceAccountPermission, especially its use with Pipe bindings and Kamelets. Read how cross-namespace resources are currently checked, then trace the related tests or add coverage for resource names. Done means each referenced resource name is validated as trusted rather than only its resource kind.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
backend, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.