Skip to content

Conversation

@jshiwamV
Copy link
Collaborator

@jshiwamV jshiwamV commented Jan 5, 2026

  • create a default service account super user role which the user will use for their default login when password based auth is enabled.
Screen.Recording.2026-01-06.at.8.53.23.PM.mov

@jshiwamV jshiwamV marked this pull request as ready for review January 6, 2026 15:22
Copy link
Collaborator

@jubrad jubrad left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We might want to think about this a bit more...

There are a couple of ways we could approach this, one way is to just automatically create a new role (not service account), if we're using password or sasl (or probably No auth).

The other way would be to take a list of objects that represent initial users that should be created... This would be a tuple of something like user, password, superuser, login

Yet another way would be to have a pod that reads from a secret and generates all roles in that secret.

I'm not convinced that always creating a role is the best option to choose here.

@jshiwamV
Copy link
Collaborator Author

jshiwamV commented Jan 7, 2026

I am inclined towards having user provided input for generating credentials, yet I don't like the idea of exposing a lot of configuration knobs to the user. I went ahead with the service account role because it could be used by user applications via serivce account, while the user roles would only be useful for login. I want to know the reason why you suggested that we shouldn't be creating service account role.

@jshiwamV
Copy link
Collaborator Author

jshiwamV commented Jan 7, 2026

the idea behind this implementation was to provide a superuser role with credentials which can be used to further create other roles needed by the user.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants