-
Notifications
You must be signed in to change notification settings - Fork 358
[META] Service Accounts #2944
Copy link
Copy link
Closed
Labels
enhancementNew feature or requestNew feature or requesttriagedIssues labeled as 'Triaged' have been reviewed and are deemed actionable.Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
Description
This tracking issue describes a feature where applications (plugins/extensions) make use of service accounts when completing actions outside the context of an impersonated user.
Service Accounts will officially become a context where there is enforcement of permissions and it is possible to determine the context an application is operating under.
Design
- Service account design question and issue tracking #2596
- How will user names and service account name collisions be handled? #3200
Implementation
- [FEATURE] Add token manager to security plugin #2939
- [Extensions] Filter internal users for Service Accounts and add associated API #2704
Integration
- [Extensions] Connect auth token generator to service accounts #2611
- [Extensions] Core-side API to get auth token for service account #2646
- [FEATURE] Grant a Service Account to an Extension on bootstrap #2942
Release criteria
- Limit Service Account permissions #3201
- Backport Service Account into 2.x branch #3557
- Service Accounts internal security review process #3199
Follow up
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requesttriagedIssues labeled as 'Triaged' have been reviewed and are deemed actionable.Issues labeled as 'Triaged' have been reviewed and are deemed actionable.