Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature request: a way to manage IAM auth policy for a Lattice Service managed by the Controller #385

Closed
klyubin opened this issue Sep 5, 2023 · 2 comments

Comments

@klyubin
Copy link
Contributor

klyubin commented Sep 5, 2023

Currently, the IAM auth policy of Lattice Services is not managed by the Controller. As a result, if I create a Lattice Service, by creating the relevant K8S resources, the Controller creates a Lattice Service with Auth Type: None. I can then change the Auth Type to IAM auth and provide an IAM auth policy. However, this creates two challenges:

  1. This diverges from the declarative way of managing Lattice Services which map to the underlying K8S cluster(s).
  2. When the Controller deletes a Service, it deletes its IAM auth policy as well. When it then recreates the service, the IAM auth policy is gone. This means I have to have something running outside of the Controller, that monitors Lattice Services and ensures they have the IAM auth policy I want.
@solmonk
Copy link
Contributor

solmonk commented Sep 5, 2023

This is being tracked in #18 and we are currently aiming for release of auth policy support in v0.1.0 milestone.

@mikhail-aws
Copy link
Contributor

closing as duplicate of #18

@graehren graehren modified the milestone: Release v0.0.18 Sep 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants