Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add proposal of cloudhub enhancement #5512

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

add proposal of cloudhub enhancement #5512

wants to merge 1 commit into from

Conversation

spambot000
Copy link
Contributor

What type of PR is this?

/kind design

What this PR does / why we need it:

Add proposal of cloudhub enhancement

Which issue(s) this PR fixes:

Fixes #5456

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from 1d5ba77 to 92b8629 Compare April 6, 2024 19:34
wbc6080
wbc6080 reviewed Apr 9, 2024
View reviewed changes
docs/proposals/cloudhub-enhancement.md Outdated
Comment on lines 15 to 21
#### Goal
- Alpha

Support node authorization mode. CloudCore can restrict an edge node from operating the resources owned by other edge nodes.
- Beta

Support RBAC authorization mode. KubeEdge users can utilize RBAC configurations to limit the access to their custom resources.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be better to add the version in which feature would be implemented. For example, Alpha features will be implemented in version 1.17, and Beta features will be implemented in version 1.18.

@Shelley-BaoYue Shelley-BaoYue added this to the v1.17 milestone Apr 10, 2024
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from 92b8629 to ee2a00a Compare May 3, 2024 14:17
@kubeedge-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign kevin-wangzefeng after the PR has been reviewed.
You can assign the PR to them by writing /assign @kevin-wangzefeng in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubeedge-bot kubeedge-bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label May 3, 2024
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from ee2a00a to 5fa8366 Compare May 3, 2024 15:32
@spambot000
add proposal of cloudhub enhancement
360ae82 
Signed-off-by: spambot000 <jkjkjk0306@163.com>
@spambot000 spambot000 force-pushed the cloudhub_authorization_proposal branch from 5fa8366 to 360ae82 Compare May 3, 2024 15:49
@spambot000
Copy link
Contributor Author

spambot000 commented May 3, 2024 •
edited

@Shelley-BaoYue @wbc6080
I've updated the proposal. The previous one is difficult to implement and maintaince. The current version utilizes both User Impersonation and NodeAuthorizer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@wbc6080 wbc6080 wbc6080 left review comments

Assignees
No one assigned
Labels
size/M Denotes a PR that changes 30-99 lines, ignoring generated files.
Projects
None yet
Milestone
v1.17
Development

Successfully merging this pull request may close these issues.

Add admission for some operations from edge to cloud
4 participants
@spambot000 @kubeedge-bot @wbc6080 @Shelley-BaoYue