Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Validate security boundaries for resource status operations #1473

Open
1 task
akashsinghal opened this issue May 14, 2024 · 0 comments
Open
1 task

Validate security boundaries for resource status operations #1473

akashsinghal opened this issue May 14, 2024 · 0 comments
Labels
enhancement New feature or request triage Needs investigation

Comments

@akashsinghal
Copy link
Collaborator

What would you like to be added?

Some resource status like KMP and certificate store may contain what might be considered sensitive information such as keys/certificate metadata. Ratify should first determine what RBAC is needed for status and whether default RBAC needs to be elevated to view status for certain resources. Ratify should also validate in namespace multitenancy scenarios.

Anything else you would like to add?

No response

Are you willing to submit PRs to contribute to this feature?

  • Yes, I am willing to implement it.
@akashsinghal akashsinghal added enhancement New feature or request triage Needs investigation labels May 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request triage Needs investigation
Projects
None yet
Development

No branches or pull requests

1 participant