alisha-1000 commented on issue #40214: URL: https://github.com/apache/beam/issues/40214#issuecomment-6359711675
Hello @tvalentyn, I’m interested in contributing to this issue and helping strengthen the security posture of the Grafana deployment in `apache-beam-testing` by implementing a least-privilege authentication model. My initial approach would be to investigate the existing deployment configuration, understand Grafana’s current authentication mechanism and required permissions, and evaluate how GKE Workload Identity can be integrated with the existing infrastructure. The goal would be to establish a dedicated identity for Grafana, minimize unnecessary permissions, and ensure that the changes align with Apache Beam’s existing infrastructure conventions. I’d be happy to investigate the current setup and develop a solution that is secure, maintainable, and consistent with the project’s deployment practices. Would you be open to me taking this forward? Any guidance on the relevant configuration or existing infrastructure considerations would be greatly appreciated. Thank you for your time :) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
