You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Current security roles model uses cluster_permissions to evaluate Transport Layer actions. This is because the plugins run in-process with OS cluster.
With Extensions being out-of-process entities, they can request OS cluster only via REST APIs.
And so there is a need to authorize these requests at REST layer.
This issue covers authorizing REST request against the legacy and new cluster_permissions model.
E.g: For hello-world sample extension, the endpoint /hello should succeed when either of the following roles are mapped to a user.
cwperks
added
triaged
Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
and removed
untriaged
Require the attention of the repository maintainers and may need to be prioritized
labels
May 15, 2023
Current security roles model uses
cluster_permissions
to evaluate Transport Layer actions. This is because the plugins run in-process with OS cluster.With Extensions being out-of-process entities, they can request OS cluster only via REST APIs.
And so there is a need to authorize these requests at REST layer.
This issue covers authorizing REST request against the legacy and new
cluster_permissions
model.E.g: For hello-world sample extension, the endpoint
/hello
should succeed when either of the following roles are mapped to a user.This enables minimal effort for admin to enable use of extensions.
The text was updated successfully, but these errors were encountered: