sensu-go
sensu-go copied to clipboard
sensu
Expose cluster level api endpoint to gather information concerning user/group permissions
Context
As an sensu admin you want to diagnose an rbac permissions problem or you want to audit a specific user's permission level.
Feature Suggestion
Expose a cluster level endpoint that a cluster admin can use to provide a summary concerning which groups a user is in and provides RBAC permission summary that points to which resource permissions are provided by which cluserrolebindings or rolebindings.
Straw use case example
Caleb is authenticating via ldap to the sensu backend i administer doesn't have the necessary access to write checks in a namespace. I'd like to use the summary endpoint for caleb's sensu username to audit caleb's existing permissions to figure out which adjustment needs to be made to ensure the correct ldap group has namespace role binding permissions.
