Skip to content

Generate RBAC  #1765

Closed
Closed

Description

@csviri

First we should investigate how complex this would be, since we would need a different approach that is now in Quarkus Operator SDK

Activity

  1. self-assigned this
    on Feb 10, 2023
  2. added this to the 4.4 milestone on Feb 10, 2023
  3. metacosm commented on Feb 10, 2023

    @metacosm
    Collaborator

    Personally, I think the SDK should focus on core functionality (and there's still a bit to do there) and leverage other tools fore additional support. Supporting RBAC/OLM generation at the SDK level would be quite an undertaking because none of the infrastructure needed for it exists.

  4. csviri commented on Feb 22, 2023

    @csviri
    CollaboratorAuthor

    none of the infrastructure needed for it exists

    what do you mean by this exactly?

    I see couple of options:

    • If dependent resources used, it can be generated from that
    • We could introduce registering informers with annotations (this would make also managed dependent resources nicer, when sharing event source). And generate basic rback from that.
    • We could simply introduce dedicated annotation for this, just like in kubebuilder: https://book.kubebuilder.io/reference/markers/rbac.html
  5. LucaMertens commented on Apr 18, 2023

    @LucaMertens

    I really like Quarkus, but I think it's not ideal that some very useful features require using Quarkus. In an ideal world (and I know that this completely neglects the required effort for this), rbac-generation would be available as an additional dependency, like the crd-generator. This way, it would not be part of the core-SDK, but as a 'plugin'.

  6. metacosm commented on Apr 18, 2023

    @metacosm
    Collaborator

    It's also worth noting that some of that functionality could be addressed at the operator-sdk plugin level.

  7. modified the milestones: 4.4, 5.0 on Jun 27, 2023
  8. modified the milestones: 5.0, 5.1 on Feb 26, 2024
  9. removed their assignment
    on Feb 18, 2025
  10. changed the title [-]Moving OLM and RBAC related resource generator to the core [/-] [+]Generate Kubernetes Resource a.k.a. RBAC [/+] on Feb 18, 2025
  11. modified the milestones: 5.1, 5.x on May 14, 2025
  12. changed the title [-]Generate Kubernetes Resource a.k.a. RBAC [/-] [+]Generate RBAC [/+] on Mar 7, 2026
  13. csviri commented on Apr 27, 2026

    @csviri
    CollaboratorAuthor

    Maybe we could re-visit this, since we have the helm chart, it is not the same thing of course, but not sure this worth the effort.

    Just some wild though: we could add a flag to the helm chart, that on helm template it would just generate RBAC, but that would be a bit unorthodox.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureneeds-discussionIssue needs to be discussed more before working on it

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions