Skip to content

Conversation

@spambot000
Copy link
Contributor

What type of PR is this?

/kind design

What this PR does / why we need it:

Add proposal of cloudhub enhancement

Which issue(s) this PR fixes:

Fixes #5456

Special notes for your reviewer:

Does this PR introduce a user-facing change?:


@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from 1d5ba77 to 92b8629 Compare April 6, 2024 19:34
Comment on lines 15 to 21
#### Goal
- Alpha

Support node authorization mode. CloudCore can restrict an edge node from operating the resources owned by other edge nodes.
- Beta

Support RBAC authorization mode. KubeEdge users can utilize RBAC configurations to limit the access to their custom resources.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be better to add the version in which feature would be implemented. For example, Alpha features will be implemented in version 1.17, and Beta features will be implemented in version 1.18.

@Shelley-BaoYue Shelley-BaoYue added this to the v1.17 milestone Apr 10, 2024
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from 92b8629 to ee2a00a Compare May 3, 2024 14:17
@kubeedge-bot kubeedge-bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label May 3, 2024
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch 2 times, most recently from 5fa8366 to 360ae82 Compare May 3, 2024 15:49
@spambot000
Copy link
Contributor Author

spambot000 commented May 3, 2024

@Shelley-BaoYue @wbc6080
I've updated the proposal. The previous one is difficult to implement and maintaince. The current version utilizes both User Impersonation and NodeAuthorizer.

@Shelley-BaoYue Shelley-BaoYue modified the milestones: v1.17, v1.18 Jun 6, 2024
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch 2 times, most recently from 794a3c9 to 694fb09 Compare June 22, 2024 10:49
Signed-off-by: spambot000 <jkjkjk0306@163.com>
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from 694fb09 to ba16d78 Compare June 22, 2024 10:52
@spambot000
Copy link
Contributor Author

Added new image to explains implementation details.

Copy link
Collaborator

@Shelley-BaoYue Shelley-BaoYue left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@kubeedge-bot kubeedge-bot added the lgtm Indicates that a PR is ready to be merged. label Jul 16, 2024
@WillardHu
Copy link
Collaborator

/approve

@kubeedge-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: WillardHu

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubeedge-bot kubeedge-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 16, 2024
@kubeedge-bot kubeedge-bot merged commit e57adde into kubeedge:master Jul 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add admission for some operations from edge to cloud

5 participants