Skip to content

[ENHANCEMENT] Colsolidate the config for RBA and MT into a single global setting #3831

@eamonnmoloney

Description

@eamonnmoloney

Describe the use case:

Right now the user needs to set a flag in three place for RBA or MT to be enabled. Make this easier by grouping this under the global setting. Also make sure the user cannot set both RBA and MT at the same time as these features do not work if both are enabled.

Details:
To enable RBA we need to set ENV vars in orchestration and identity. Specifically, CAMUNDA_TASKLIST_IDENTITY_RESOURCE_PERMISSIONS_ENABLED and CAMUNDA_OPERATE_IDENTITY_RESOURCEPERMISSIONSENABLED in orchestration and RESOURCE_PERMISSIONS_ENABLED in identity. This should be a single global value like we have for MT.

global:
resourced-based-authorization: true

Then in the templates we setup orch and identity as needed

We do this already for MT, this is expending that to RBA.

Second piece is, prevent the user from enabling both RBA and MT at the same time as these cannot be run together

Describe the enhancement/feature:

Desired outcome and acceptance tests:

Metadata

Metadata

Assignees

Labels

P2Moderate impact issues but not urgent for immediate resolution.kind/enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions