Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resource Mapping - Support groupings and namespace/FQN #666

Open
ttschampel opened this issue Apr 25, 2024 · 2 comments
Open

Resource Mapping - Support groupings and namespace/FQN #666

ttschampel opened this issue Apr 25, 2024 · 2 comments
Assignees
Labels
comp:policy Policy Configuration ( attributes, subject mappings, resource mappings, kas registry)

Comments

@ttschampel
Copy link
Member

As a publisher and consumer of resource mappings I'd like to:

  • bundle groups of Resource Mappings into a set ResourceMappingSet
  • reference the ResourceMappingSet by FQN
  • enforce access and share ResourceMappingSets by namespace
  • CRUD ResourceMappingSets
  • Find ResourceMappingSets/ResourceMappings by FQN, Namespace
@ttschampel ttschampel added the comp:policy Policy Configuration ( attributes, subject mappings, resource mappings, kas registry) label Apr 25, 2024
@ttschampel
Copy link
Member Author

The addressable/usability concerns similar to #585 , but for resource mappings

@jakedoublev
Copy link
Contributor

jakedoublev commented Apr 30, 2024

Hey @ttschampel, some follow-up questions for you:

  • Right now, resource mappings are associated with attribute values. Do you envision RM Sets to group only RMs on the same attribute definition? In other words, an example RM Set could be an ANY_OF attribute with 4 values, each value containing an RM, and the 4 RMs together equating to the RM Set?

  • Regarding FQN lookup, do you mean we should have an FQN for a Resource Mapping, or that you should be able to look up an RM by its associated attribute value FQN? In that case, it seems like we'd just need to make sure the FQN lookup exposes all mappings for the relevant value being looked up?

  • Lastly, as RMs are currently only associated with attribute values, and not definitions or namespaces, is there a use case I am not aware of for mapping RMs to namespaces? Alternatively, is it more about the query so that given a namespace you can find all RMs associated with values on attributes under that namespace?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp:policy Policy Configuration ( attributes, subject mappings, resource mappings, kas registry)
Projects
None yet
Development

No branches or pull requests

2 participants