How to specify different verbs for different resources in single command ?

[isindir]

How to specify different verbs for different resources in single command ?

Also would be usefull to be able able to give a custom name or prefix for the temp rbac setup

[viveksinghggits]

Hi @isindir, thanks for pointing that out, unfortunately specifying different verbs for different resources is not supported right now. And the main problem is how the CLI UX is going to look like. How exactly can user specify that. About your second point, I agree, we should be able to specify the username atleast. I have created an issue to track that. https://github.com/viveksinghggits/akcess/issues/8

[isindir]

@viveksinghggits it is possible to add repeated flags, for exmaple:

abc --flag param1 --flag param2

at the same time the whole set of verb + resource + name +namespace caould potentially take form of:

verbs:resources:name:namespace

[isindir]

btw, it would be usefull to log out location of "config" file, which looks more like a log file as well as add information about all resources created as part of each invocation of allow

[viveksinghggits]

@viveksinghggits it is possible to add repeated flags, for exmaple:

abc --flag param1 --flag param2

at the same time the whole set of verb + resource + name +namespace caould potentially take form of:

verbs:resources:name:namespace

Hi @isindir, I designed it in that way so that people who are familiar with kubectl would not have to learn how akcess works. But let's see if people have requirement to specify different verbs for different resources we can consider changing design a bit.

[viveksinghggits]

btw, it would be usefull to log out location of "config" file, which looks more like a log file as well as add information about all resources created as part of each invocation of allow

Hi @isindir, Since we have already specified the resources that we create here, I am not sure what else are you expecting. Can you please explain. We can specify in README where do we create the config file.

[isindir]

In the code it may create in tempdir or in home directory , the only way to know where it stores the data is reading code. I agree - list commad provides some information, and readme provides some extra, but it would better to have full list of created resourses via list as well as to know how to remove log file itself. The other problem - delete command does not provide -k switch, which made it impossible for me to remove all resources using utility created these resources.

[viveksinghggits]

Hi, thank you @isindir for the valuable inputs. I think we should try to solve this in steps. I think the first thing that I should try to resolve is making sure akcess delete honors the -k flag. What do you think. And then we can talk about other things as well. Do you mind raising another issue specifically to support -k flag for akcess delete.

[isindir]

@viveksinghggits I think flags like -k can be part of global flags which are passed before any specific sub-command can be issued and depending on actual sub-command may be ignored.