Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Time-based role bindings #387

Closed
weisdd opened this issue Apr 24, 2023 · 3 comments
Closed

Time-based role bindings #387

weisdd opened this issue Apr 24, 2023 · 3 comments
Labels
enhancement Adding additional functionality or improvements triage This bug needs triage

Comments

@weisdd
Copy link

weisdd commented Apr 24, 2023

Is your feature request related to a problem? Please describe.
In some cases (like for production environment), there could be organization policies in place restricting the amount of time a certain level of access can be granted to a user. Some cloud providers like Azure offer JIT-access (Just-in-Time), though it'd be great to have something more generic.

Describe the solution you'd like
Not sure if it's within the scope of the project, but it'd be interesting to see time-based role bindings.
Say, I grant elevated access to a user now and want it to get revoked (through deletion of RoleBinding/ClusterRoleBinding) at 10 am this Friday. I don't expect it all to be super-precise, just a few minutes-wide window would be good enough.
As a variation, there could be more flexible schedules with both start and end dates present.

Describe alternatives you've considered

  • scheduled pipelines;
  • reminders to adjust RBACDefinition.
@weisdd weisdd added enhancement Adding additional functionality or improvements triage This bug needs triage labels Apr 24, 2023
@sudermanjr
Copy link
Member

I believe this is a duplicate of #204

@sudermanjr
Copy link
Member

(And still a great idea)

@weisdd
Copy link
Author

weisdd commented Apr 24, 2023

@sudermanjr Indeed, thanks for pointing that out! I guess, when I was searching for discussions around this idea, my set of keywords was too specific, so missed #204.
Anyway, great to see that it's something on the radar, just waiting for community contributions. I'll see if it's something I could work on in the coming weeks (mostly depends on my work load).

@weisdd weisdd closed this as completed Apr 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Adding additional functionality or improvements triage This bug needs triage
Projects
None yet
Development

No branches or pull requests

2 participants