Auth Providers: Add search_using_service_account
field
#12871
Labels
area/authentication
kind/design
kind/enhancement
QA/dev-automation
Issues that engineers have written automation around so QA doesn't have look at this
QA/manual-test
Indicates issue requires manually testing
Milestone
Add the ability to configure
searchUsingServiceAccount
while creating and editing openldap and freeipa auth providers.Acceptance criteria
searchUsingServiceAccount
is able to be configured for openldap and freeipa auth providerssearchUsingServiceAccount
is a boolean with a default value offalse
Notes
searchUsingServiceAccount
setting is located under/v3/authconfigs
searchUsingServiceAccount
applies only to freeipa an openldap providersshell/edit/auth/ldap/config.vue
is most likely the component that will receive this changeshell/mixins/auth-config.js
Details
This feature request is related to rancher/rancher#43064.
Rancher currently scopes searches to the permissions of the requesting user to prevent permission escalation. This approach doesn't support typical setups where users have no permissions in the authentication provider, and a service account is used to control read permissions. Adding
search_using_service_account
allows users who use the more typical setups to use Rancher in the method that they desire.The text was updated successfully, but these errors were encountered: