Question: Matching role/permissions for Aiven Operator's CRDs/resources

[teksuo]

Hi there,

Is there documentation somewhere where I can check the role/permissions that I need to assign the application user token I am using for the Aiven Operator so I am able to fully manage every type of resource for which the operator provides a CRD?

Thanks in advance

[staceysalamon-aiven]

Hey @teksuo, you can see all roles and permissions that you can assign to users (including application users) in the Aiven docs. Hope that helps!

[teksuo]

Thanks for the quick answer Stacey, I am aware of that documentation but I was just wondering whether the operator role is precisely intended for this operator and therefore needs no further granular permission or on the contrary we need to add some specific permissions for specific tasks that the former role might not cover, like:

Anyway, I was missing some specific documentation on the operator side on this aspect confirming this instead of testing out myself every test case I can think of.

[staceysalamon-aiven]

Apologies for the delay here! The operator role, despite its name, is not specifically intended for the Aiven Kubernetes Operator. If there are specific permissions not covered by the operator role that you need for the tasks you want the application user to perform, then adding them as separate permissions is a good idea. The project admin role also has more permissions, so depending on what you need this might be a good option for you.

[teksuo]

thanks, so far the operator role is fulfilling all of my current use cases 😄

I will keep the issue open until some documentation is added on this regard, but feel free to close it if needed.