gsadmin/garage-ui
1
0
Fork 0
mirror of https://github.com/Noooste/garage-ui.git synced 2026-08-27 07:27:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(values.yaml): add comments for team-based access control configuration

Browse Source
This commit is contained in:
Noste
2026-07-29 17:59:39 +02:00
parent 91770dc5b2
commit 987b7e8625
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm/garage-ui/values.yaml
+8
View File
@@ -160,6 +160,14 @@ config:
# Options: json, text # Options: json, text
format: "json" format: "json"
# Optional: team-based access control (see docs/access-control.md).
# Absent -> every authenticated user has full access.
# Present -> default-deny: OIDC users get only what their teams grant; users
# matching no team get 403 everywhere. admin_role users, admin
# password logins, and token logins are always full-admin.
# NOTE: this is UI-layer policy, NOT a security boundary. Anyone holding the
# Garage admin token or S3 keys bypasses it entirely.
#
# access_control: # access_control:
# presets: # presets:
# bucket_readonly: [bucket.list, bucket.read, object.list, object.read] # bucket_readonly: [bucket.list, bucket.read, object.list, object.read]