4 ms·
Announcing Baton, an Open Source Toolkit for Auditing Infrastructure User Access
- philips 4y agoThe Kubernetes development team always had really great tooling to manage users and their permissions on repos and cloud resources. I am glad to see this project that is trying to tackle this sort of User Access control for all sorts of different platforms. If you are interested the Kubernetes stuff is all sort of project specific: https://github.com/kubernetes/org https://github.com/kubernetes/org
- pquerna 4y agoIts cool to see the automation the kubernetes team stuff does against Github -- but has it been expanded to other resources, eg AWS or some other SaaS used? Other thought I had, is there any concept of expiration of permissions? Something I ran into when I used to do more Apache Software Foundation work was that, we had thousands of committers with shell access -- but 94% never used it. Are any of the things protected by this privileged? eg, a release private key?