-
3 Vote
K8S Security Group Customization
When you build the k8s clusters the security group for the nodes only allows traffic in from certain other terraform created SGs and things like SSH. We make heavy use of the NodePort service type which allocates an arbitrary open high port for th...
0
-
1 Vote
Required SSO / related security policies
Security policy would typically dictate that SSO should be required. This leads to a couple of items: 1) Ability to require SSO - no ability to set passwords on non-SSO accounts/blocking of some sort/marking a given account as 'SSO only' 2) Some s...
0
-
1 Vote
Add multiple 'admin' tiers in PMK - allow for limiting to a particular tenant
It's my understanding that currently there is no 'Tenant' level administrator, only Account level. Use case: 1 account/controlplane 2 teams Goal would be to allow team A and team B to each deploy/manage/configure/etc. their own clusters/nodes/etc....
0
-
1 Vote
"All clusters" kubeconfig generator
Provide a mechanism in the managed kubernetes UI to download a kubeconfig that has tokens and config for ALL clusters, but configured with contexts for all clusters to allow readily switching between them. RIght now, you create a config that has a...
1
-
1 Vote
Allow a "don't keep any credentials" mode during node creation
When I went to set up nodes, I was surprised to see the login creds being cached in ~/pf9/... While this config/content is not needed after node has been set up, would be better practice to allow for a prompt "Leave password blank if you want to b...
1