-
Notifications
You must be signed in to change notification settings - Fork 148
Description
Describe the use case:
Right now the user needs to set a flag in three place for RBA or MT to be enabled. Make this easier by grouping this under the global setting. Also make sure the user cannot set both RBA and MT at the same time as these features do not work if both are enabled.
Details:
To enable RBA we need to set ENV vars in orchestration and identity. Specifically, CAMUNDA_TASKLIST_IDENTITY_RESOURCE_PERMISSIONS_ENABLED and CAMUNDA_OPERATE_IDENTITY_RESOURCEPERMISSIONSENABLED in orchestration and RESOURCE_PERMISSIONS_ENABLED in identity. This should be a single global value like we have for MT.
global:
resourced-based-authorization: true
Then in the templates we setup orch and identity as needed
We do this already for MT, this is expending that to RBA.
Second piece is, prevent the user from enabling both RBA and MT at the same time as these cannot be run together
Describe the enhancement/feature:
Desired outcome and acceptance tests: