audit2rbac icon indicating copy to clipboard operation
audit2rbac copied to clipboard

Allow specifying a file/folder to output generated objects to

Open liggitt opened this issue 6 years ago • 1 comments

Rather than writing output to stdout, allow specifying an output file

This is a prereq for generating intermediate results when processing a large or continuous audit stream

Could either generate everything into a single file, or generate a file per type (clusterroles, roles, clusterrolebindings, rolebindings)... not sure which is better.

When generating, would generate to a tmp file, then do an atomic move into place, so an apply loop operating on the file would never get a partially written file.

liggitt avatar Sep 11 '17 04:09 liggitt

Looking more into this tool, I love this idea.

I think one file per type would be preferable. It's much easier to consume from a human standpoint.

sudermanjr avatar Apr 29 '20 19:04 sudermanjr