OPA: Make principal name to LDAP configurable #145
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 30/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- kubernetes, rust
- Domain
- authorization
Research direction
Start with the OPA user-info-fetcher Active Directory section linked in the issue, then trace how principal names are generated and where operator configuration is defined. Done means deployments in different environments can configure distinct principal names while preserving uniqueness for LDAP.
Written by the indexing model from the issue text.
Description
Currently we generate the principal names out of deployment and namespace ( essentially the service name ) which works fine in single cluster environments.
If you want to create the same deployments for different environments ( dev, staging ) the principal names wouldn't change as the svc are the same.
This will fail in in average LDAP settings and thus we might want to be able to configure the principal name.
The problematic is, that the principals need to be unique. Maybe like sAMAccountName just a prefix or suffix.
Docs: https://docs.stackable.tech/home/stable/opa/usage-guide/user-info-fetcher/#backend-activedirectory
- Dominant language
- Rust
- Stars
- 21
- Forks
- 5
- Avg merge
- 12h 44m
- Merged PRs (30d)
- 11
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from stackabletech/opa-operator
-
type/bug
Difficulty 4/5 3-5 days Newbie friendliness 52/100
stackabletech/opa-operator#823 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
stackabletech/opa-operator#733 ·
-
Difficulty 2/5 Half a day Newbie friendliness 50/100
stackabletech/opa-operator#724 ·
-
type/bug
Difficulty 5/5 Over a week Newbie friendliness 20/100
stackabletech/opa-operator#718 ·
-
type/bug
Difficulty 3/5 1-2 days Newbie friendliness 35/100
stackabletech/opa-operator#690 ·
All issues in stackabletech/opa-operator
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Eynzof/Hermes-CN-Desktop#616 ·
-
bug rules
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
app bug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
IronCoreLabs/ironcore-alloy#346 ·
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 65/100