Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow local authentication mode not just for development #126

Open
5 tasks
roee88 opened this issue Dec 4, 2020 · 1 comment
Open
5 tasks

Allow local authentication mode not just for development #126

roee88 opened this issue Dec 4, 2020 · 1 comment
Labels
enhancement New feature or request

Comments

@roee88
Copy link

roee88 commented Dec 4, 2020

Razee in local auth mode could be used by higher level controllers to manage deployments across clusters, not just for testing purposes but for regular usage as well. In this scenario the only user of Razee is a higher level K8S controller (not humans) that uses a dedicated Razee instance for managing resources (typically co-located in the same cluster).

To make this work there are several items to be addressed:

  • Creation of users (graphql api) currently doesn't require authentication. This creates a security risk because the api endpoint is publicly exposed (to allow connections from the agents) - This might be considered a bug - in which repo should we open an issue?
  • Document that currently there can only be one Razee instance per cluster. Basically, higher level controllers should always be configurable to use some Razee instance (dedicated with local auth or a shared instance if one already exists).
  • Optionally support using the Razee Dash UI with local mode.
  • Optionally allow installation with local mode
  • Documents local as a legit deployment model (cf. dev only)

The alternative is to keep it as dev only and require a more complex setup for such use cases.

@roee88
Copy link
Author

roee88 commented Dec 17, 2020

Please let me know whether this is something that you want to have or should I close the issue instead.

@adamkingit adamkingit added the enhancement New feature or request label Jan 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants