https://flyte.org logo
Join Slack
Powered by
Is it possible in flyte (in helm with kubernetes) ...
# flyte-support
f
Is it possible in flyte (in helm with kubernetes) to set policies for which group (from keycloak) sso) it is allowed to have how many ressources and which groups are allowed to only use flyte?
Can i do it in the helm values with?:
Copy code
configmap:
  adminServer:
    security:
      authorization:
        policies:
          - match:
              group: "allowed-group" # Replace with the Keycloak group name
            allow: true
          - match:
              group: "*"
            allow: false
a
RBAC is not available in OSS Flyte, among other reasons, one could see how almost every organization and IdP would require a different implementation. The closest is this community proposal to have an authz interceptor that could extract project/domain and isolate a user in that context. RBAC is available on the Flyte-powered Union platform
f
@acoustic-parrot-22802 you can use union - Union has all of this built in
a
@freezing-airport-6809 sorry, I didn't get you
f
@acoustic-parrot-22802 I mean, Union has RBAC, auth, and many other things pre-built
a
can you please share an example/document for reference
f
2 Views
Open in Slack
PreviousNext
Powered by