Skip to content

Security role rule resourceNames needs to consider Kafka namespace #1805

@MikeEdgar

Description

@MikeEdgar

The fix in #1752 to allow Kafka CRs having the same name in different namespaces does not account for namespace in the configuration of a role.

For example, if my-kafka were to be configured in namespace1 and namespace2, the user has no way to constrain access to one or the other.

spec:
  security:
    roles:
      - name: foo-role
        rules:
          - privileges:
              - ALL
            resources:
              - kafkas
            resourceNames:
              - my-kafka

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions