Give access to only relevant Backup CRs
shubham-pampattiwar opened this issue · 2 comments
Currently, the velero CLI is a very useful tool, particularly the describe backup option. This option comes in pretty handy to gain more detailed insights on what is getting backed up (ResourceList) or which operations are in progress (async datamover operations) or details like how many items are still remaining to be backed up and much more. Hence, it is desirable that the non-admin user should be able to view these details only on the relevant Velero Backup CRs (focus here on relevant i.e only the CRs that were triggered via their own NS NAB CRs). Implementation of a Validating webhook seems to a reasonable way to solve this and ensure that non-admin has view/read access to their own relevant backups CRs via Velero CLI.
yes, closing this issue in favor of the one created earlier #7