microsoft / microsoft/ebpf-for-windows
BPF Performance dashboard should use RBAC
Open
ci/cd
help wanted
security
triaged
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 311
- Avg merge
- 6d 10h
- Merged PRs (30d)
- 21
Description
Currently the [upload-perf-results.yml](https://github.com/microsoft/ebpf-for-windows/blob/main/.github/workflows/upload-perf- results.yml) uses user name and password to log into the DB to upload results.
This should be switched to an Azure Managed Identity with RBAC.
Contributor guide
Research direction
Start with .github/workflows/upload-perf-results.yml and trace how the BPF performance results upload authenticates to the database. Replace the username-and-password approach with Azure Managed Identity and RBAC, then verify that the workflow can still upload results without those credentials.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, github-actions
- Domain
- authorization, cloud, devops
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100