access-manager

README

Sveltos

Please refere to sveltos documentation.

Access manager is a projectsveltos service whose goals are:

1. to generate a kubeconfig using TokenRequest;
2. process RoleRequest

RoleRequest are used by platform admin to grant permissions to tenant admins in one or more managed clusters.

AccessRequests are used for sveltos services deployed in the managed clusters that need to access back management cluster. Any other service can request a kubeconfig by creating an AccessRequest. Access manager then:

1. generates kubeconfig;
2. stores in a secret;
3. updates AccessRequest Status with the information on the Secret containing the kubeconfig;
4. continuosly regenerate the token (whose expiration is set to 10 minutes)

Contributing

❤️ Your contributions are always welcome! If you want to contribute, have questions, noticed any bug or want to get the latest project news, you can connect with us in the following ways:

1. Open a bug/feature enhancement on github
2. Chat with us on the Slack in the #projectsveltos channel
3. Contact Us

License

Copyright 2022.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.