Restricting namespace read access in mesh

6 views
Skip to first unread message

Prashant Arya

unread,
Oct 12, 2020, 8:05:40 AM10/12/20
to kiali-users
A mesh contain A,B,C namespace and user is part of A namespace only.
Right user can view all the three namespace.
Is there any configuration which can enable this kind of authorization?



Thanks

John Mazzitelli

unread,
Oct 12, 2020, 8:12:16 AM10/12/20
to kiali-users
> A mesh contain A,B,C namespace and user is part of A namespace only.
> Right user can view all the three namespace.
> Is there any configuration which can enable this kind of authorization?

Provide a k8s role/rolebinding to the user which only gives access to A namespace. Then configure Kiali to utilize either "token" or "openid" auth strategy (You did not indicate if you are on OpenShift or not - if on OpenShift, use the "openshift" auth strategy).

For details, see: https://kiali.io/documentation/latest/configuration/rbac/

Reply all
Reply to author
Forward
0 new messages