[{"data":1,"prerenderedAt":188},["ShallowReactive",2],{"project-22147645":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":38,"post_text":39,"what":40,"said":64,"maker_in_thread":121,"shape":130,"grid":133,"attempts":149,"same_week":150,"maker_shows":32,"maker_hidden":181,"reader_version":182,"card":183},"22147645","Permission Manager","Kubernetes Permission Manager, Free and OSS Tool to Manage RBAC\u002FUsers","title","Show HN: Kubernetes Permission Manager, Free and OSS Tool to Manage RBAC\u002FUsers","https:\u002F\u002Fgithub.com\u002Fsighupio\u002Fpermission-manager","github.com","jnardiello",1579976235,2020,37,8,1246,3028,42,"shown","infrastructure","kubernetes access management","web_app",[24,25,26,27],"kubernetes","rbac","user management","kubernetes certificates","curious",0.25,{"positive":31,"neutral":32,"mixed":33,"critical":33},2,3,0,5,{"docs":36,"idea":37},{"positive":33,"critical":33},{"positive":31,"critical":33},[32,33,34,32,34,33,32,33],null,{"problem":41,"audience":48,"pricing":39,"motivation":56,"time_to_build":39,"stack":60,"openness":61,"stage":62,"team_size":63},{"value":42,"source":43,"evidence":44},"Managing Kubernetes RBAC users and access where no IAM\u002FOIDC\u002FLDAP integration exists","maker",[45],{"id":46,"by":11,"text":47},"22148840","You are entirely correct, we started this project as an internal tool to be used in any environment where no integration with IAM\u002FOIDC\u002FLDAP\u002FAD\u002Fetc.. was available (we handle LOTS…",{"value":49,"source":43,"evidence":50},"Teams and orgs running smaller Kubernetes deployments without external identity integration",[51,52],{"id":46,"by":11,"text":47},{"id":53,"by":54,"text":55},"22148397","charlieegan3","It might be good to clarify your expected users. Most Kubernetes users I have worked with integrated with some cloud provider auth or similar to grant permissions to Kubernetes…",{"value":57,"source":43,"evidence":58},"Built as an internal tool for managing many clusters, then open sourced",[59],{"id":46,"by":11,"text":47},[],"open_source","launched","unknown",{"praise":65,"objections":78,"requests":83,"questions":96,"alternatives":108},[66],{"value":67,"source":68,"evidence":69},"Solves an important Kubernetes access problem","commenter",[70,74],{"id":71,"by":72,"text":73},"22149066","znpy","Thanks, this solves a very important problem in the k8s ecosystem. For me personally, I've spent the weekends of the last two months learning ldap basics only to find out that…",{"id":75,"by":76,"text":77},"22148491","aliljet","This is honestly pretty fantastic. How does this compare with things like Dex+Gangway?",[79],{"value":80,"source":68,"evidence":81},"Unclear who the target users are; integrations with cloud auth are more common",[82],{"id":53,"by":54,"text":55},[84,89],{"value":85,"source":43,"evidence":86},"GitOps \u002F config-as-code support",[87,88],{"id":53,"by":54,"text":55},{"id":46,"by":11,"text":47},{"value":90,"source":68,"evidence":91},"Integration with AWS IAM users and roles",[92],{"id":93,"by":94,"text":95},"22149488","benwilson-512","This looks very cool. Is there a story for managing users associated with AWS IAM roles or users?",[97,101],{"value":98,"source":68,"evidence":99},"How does it compare to Dex+Gangway",[100],{"id":75,"by":76,"text":77},{"value":102,"source":68,"evidence":103},"Relation to OPA",[104],{"id":105,"by":106,"text":107},"22149319","streetcat1","so, can you compare this to the OPA? Are you integrating with the OPA? Also, there was an old project called casbin which is used by ArgoCD. In my system, I created an Account…",[109,113,117],{"value":110,"source":68,"evidence":111},"Dex+Gangway",[112],{"id":75,"by":76,"text":77},{"value":114,"source":68,"evidence":115},"OPA \u002F Gatekeeper",[116],{"id":105,"by":106,"text":107},{"value":118,"source":68,"evidence":119},"casbin",[120],{"id":105,"by":106,"text":107},{"comments":32,"answered":32,"key":122},[123,124,127],{"id":46,"text":47},{"id":125,"text":126},"22148850","Entirely different use-case. This is a simplified way to create new users, templates and distribute certificates to access a cluster. It does NOT integrate with external…",{"id":128,"text":129},"22149489","Not related to OPA. This is not an admission webhook, nor deals with gatekeeper and such, it does not enforce policies. It's a simple abstraction on the certs creation mechanisms…",{"commenters":131,"max_depth":31,"maker_replies":32,"first_comment_mins":132,"lifespan_hours":131},6,121,[134,136,139,141,143,144,146,148],[53,33,32,135,54,33],"project\u002Fneutral\u002Fdocs",[46,33,33,137,11,138],"maker\u002Fneutral\u002Fidea",1,[71,138,34,140,72,33],"project\u002Fpositive\u002Fidea",[93,31,32,142,94,33],"project\u002Fneutral\u002Fnone",[75,32,34,140,76,33],[125,32,33,145,11,138],"project\u002Fneutral\u002Fidea",[105,147,32,145,106,33],4,[128,147,33,145,11,138],[],[151,156,161,166,171,176],{"id":152,"name":153,"points":154,"category":155},"22152736","usb-hubs.org",560,"web_saas",{"id":157,"name":158,"points":159,"category":160},"22154088","botium-speech-processing",438,"ai",{"id":162,"name":163,"points":164,"category":165},"22128385","Women Make",345,"consumer_social",{"id":167,"name":168,"points":169,"category":170},"22164212","Binarysearch.io",279,"learning_science",{"id":172,"name":173,"points":174,"category":175},"22174412","Thinc",250,"languages",{"id":177,"name":178,"points":179,"category":180},"22139975","Postgresqlco.nf",223,"dev_tools",false,"v2",{"id":184,"name":5,"line":6,"ai":181,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":185,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":186,"url":9,"mix":187,"praise":67,"objection":80,"sub":21},22147645,[24,25,26,27],"30535030",[31,32,33,33],1793991002580]