vault icon indicating copy to clipboard operation
vault copied to clipboard

UI missing policies on Kubernetes roles

Open MarkRx opened this issue 2 years ago • 1 comments

The UI does not currently provide a way to view or modify policies on a Kubernetes role. It only seems to provide a way to configure token policies. It currently must be done through either the API or the vault client.

The UI should be updated to support policies on Kubernetes roles in order to be more user friendly.

image

MarkRx avatar Dec 13 '22 18:12 MarkRx

Thanks @MarkRx! Transferring over the the vault repo since that's where the UI lives.

tvoran avatar Dec 14 '22 06:12 tvoran

@MarkRx I'm looking into this and is the missing param on the UI form policies? The API description is the exact same for both policies and token_policies so I want to make sure I'm looking at the correct missing param. Thanks for making the Issue.

Monkeychip avatar Mar 02 '23 17:03 Monkeychip

Hi @MarkRx - checking in with this as we're still awaiting your feedback from @Monkeychip's comment. Thanks!

heatherezell avatar Apr 05 '23 20:04 heatherezell

Oh you know what, I think policies is deprecated in favor of token_policies:

https://github.com/hashicorp/vault-plugin-auth-kubernetes/blob/530b5e913097cf7eea6ff1e2d7b977dd3dba2a16/path_role.go#L65-L69

We should probably mark it as deprecated in the docs too.

tvoran avatar Apr 06 '23 22:04 tvoran

Oh you know what, I think policies is deprecated in favor of token_policies:

hashicorp/vault-plugin-auth-kubernetes@530b5e9/path_role.go#L65-L69

We should probably mark it as deprecated in the docs too.

Thank you for this note Theron! @yhyakuna I will assign this to you, if you don't mind. Thank you!

heatherezell avatar Apr 07 '23 02:04 heatherezell

The docs has been updated.

yhyakuna avatar Oct 23 '23 19:10 yhyakuna