nebari
nebari copied to clipboard
[ENH] - Update default conda-store namespace permissions
Feature description
We need to update the base default permission set for new conda-store namespaces (keycloak groups) to allow read/write instead of just read access.
Value and/or benefit
- users will be able to create/share and manage environments more naturally
Anything else?
No response
Possible places to change: https://github.com/nebari-dev/nebari/blob/4b51e15e59ca1a9451388a90eb532ee9d756f16f/src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/conda-store/config/conda_store_config.py#L395-L414
I need to thoroughly inspect the permissions mapping done through keycloak to conda-store once again, just to ensure we can globally update the default set of permissions or include a custom role by default in each newly created group.