stackabletech / stackabletech/opa-operator
OPA: Make principal name to LDAP configurable #145
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 21
- Forks
- 5
- Avg merge
- 12h 44m
- Merged PRs (30d)
- 11
Description
Currently we generate the principal names out of deployment and namespace ( essentially the service name ) which works fine in single cluster environments.
If you want to create the same deployments for different environments ( dev, staging ) the principal names wouldn't change as the svc are the same.
This will fail in in average LDAP settings and thus we might want to be able to configure the principal name.
The problematic is, that the principals need to be unique. Maybe like sAMAccountName just a prefix or suffix.
Docs: https://docs.stackable.tech/home/stable/opa/usage-guide/user-info-fetcher/#backend-activedirectory
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the OPA user-info-fetcher Active Directory section linked in the issue, then trace how principal names are generated and where operator configuration is defined. Done means deployments in different environments can configure distinct principal names while preserving uniqueness for LDAP.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes, rust
- Domain
- authorization
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100