Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Token Management Flexibility #3379

Open
finally-fancy opened this issue Oct 8, 2024 · 0 comments
Open

Token Management Flexibility #3379

finally-fancy opened this issue Oct 8, 2024 · 0 comments

Comments

@finally-fancy
Copy link

Description
Introduce a fourth token storage mechanism “Injected” which allows Busula to accept tokens from external sources like OpenMFP. In this scenario, OpenMFP manages the token lifecycle ensuring that Busula does not need to handle or store tokens directly.

Reasons
Busula currently requires a kubeconfig or token to communicate with the Kubernetes clusters. The user must provide this during cluster registration, and the token or kubeconfig is then stored in various browser storages such as localStorage, sessionStorage, or in-memory storage.

Moreover, Busula currently lacks the flexibility to allow external systems or frameworks, like OpenMFP, to inject a token directly into the UI. OpenMFP, being a UI micro-framework, is a good candidate to manage such tokens outside of Busula, reducing security risks and providing more control over the token lifecycle. This raises security concerns, as the token may be vulnerable to attacks or misuse, depending on where and how it is stored.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant