Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve convenience of user and ACLs usage #749

Open
Yamakaky opened this issue Jan 13, 2024 · 0 comments
Open

Improve convenience of user and ACLs usage #749

Yamakaky opened this issue Jan 13, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@Yamakaky
Copy link

Is your feature request related to a problem? Please describe.
Currently, it seems that the only way to create redis users and associated ACLs declaratively is via the acl.secret.secretName directive in the cluster CRD. The associated secret contains a list of users and their permissions. To give access to a pod to its credentials, one either needs to manually create a secret with only the user's credential, or give it access to the main acl secret which defeats the purpose of having multiple users and access rights.

Describe the solution you'd like
I think something similar to what rabbitmq operator does would be appropriate. It allows the definition of users via CRD. Credentials are automatically generated and stored in a secret. Then, rabbitmq is configured with all the defined users and permissions. https://www.rabbitmq.com/kubernetes/operator/using-topology-operator.html#users-permissions.

Describe alternatives you've considered
I'm not sure what would be the best way to generate the current ACL file setup. I guess a script that generate the ACL + creates a secret per user? It would work but would be way less convenient.

What version of redis-operator are you using?

redis-operator version: 0.15

Additional context

@Yamakaky Yamakaky added the enhancement New feature or request label Jan 13, 2024
@wkd-woo wkd-woo mentioned this issue Mar 3, 2024
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant