argoproj / argoproj/argo-workflows
Multi-cluster RBAC
Open
area/multi-cluster
size/S
type/security
- Dominant language
- Go
- Stars
- 17k
- Forks
- 3.7k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 138
Description
We need to allow users to control which clusters and namespace a workflow is allowed to create pods in.
Use Casbin.
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by locating the workflow authorization and cluster/namespace handling, then review how Casbin could express the requested permissions; done means users can restrict workflow pod creation to specified clusters and namespaces.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- authorization, backend
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100