You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
In some cases (like for production environment), there could be organization policies in place restricting the amount of time a certain level of access can be granted to a user. Some cloud providers like Azure offer JIT-access (Just-in-Time), though it'd be great to have something more generic.
Describe the solution you'd like
Not sure if it's within the scope of the project, but it'd be interesting to see time-based role bindings.
Say, I grant elevated access to a user now and want it to get revoked (through deletion of RoleBinding/ClusterRoleBinding) at 10 am this Friday. I don't expect it all to be super-precise, just a few minutes-wide window would be good enough.
As a variation, there could be more flexible schedules with both start and end dates present.
Describe alternatives you've considered
scheduled pipelines;
reminders to adjust RBACDefinition.
The text was updated successfully, but these errors were encountered:
@sudermanjr Indeed, thanks for pointing that out! I guess, when I was searching for discussions around this idea, my set of keywords was too specific, so missed #204.
Anyway, great to see that it's something on the radar, just waiting for community contributions. I'll see if it's something I could work on in the coming weeks (mostly depends on my work load).
Is your feature request related to a problem? Please describe.
In some cases (like for production environment), there could be organization policies in place restricting the amount of time a certain level of access can be granted to a user. Some cloud providers like Azure offer JIT-access (Just-in-Time), though it'd be great to have something more generic.
Describe the solution you'd like
Not sure if it's within the scope of the project, but it'd be interesting to see time-based role bindings.
Say, I grant elevated access to a user now and want it to get revoked (through deletion of RoleBinding/ClusterRoleBinding) at 10 am this Friday. I don't expect it all to be super-precise, just a few minutes-wide window would be good enough.
As a variation, there could be more flexible schedules with both start and end dates present.
Describe alternatives you've considered
RBACDefinition
.The text was updated successfully, but these errors were encountered: