Re: [I] [Feature Request]: Implement least-privilege access for GKE workload hosting Beam metrics. [beam]

["alisha-1000 (via GitHub)" <gi...@apache.org>]

alisha-1000 commented on issue #40214:
URL: https://github.com/apache/beam/issues/40214#issuecomment-6359711675

   Hello @tvalentyn,
   
   I’m interested in contributing to this issue and helping strengthen the security posture of the Grafana deployment in `apache-beam-testing` by implementing a least-privilege authentication model.
   
   My initial approach would be to investigate the existing deployment configuration, understand Grafana’s current authentication mechanism and required permissions, and evaluate how GKE Workload Identity can be integrated with the existing infrastructure. The goal would be to establish a dedicated identity for Grafana, minimize unnecessary permissions, and ensure that the changes align with Apache Beam’s existing infrastructure conventions.
   
   I’d be happy to investigate the current setup and develop a solution that is secure, maintainable, and consistent with the project’s deployment practices.
   
   Would you be open to me taking this forward? Any guidance on the relevant configuration or existing infrastructure considerations would be greatly appreciated.
   
   Thank you for your time :)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org