Category: Technology

Before version Spinnaker 1.17, there was no way to prevent application creation in it. When configuring permissions, you must explicitly configure permissions for each user role. The default for a user role is no-permissions, which means it cannot perform any actions. Explanation Fiat is the authorization (authz) microservice of Spinnaker, which looks for the permissions from different sources. In spinnaker version 1.17, new sources were added, providing more flexibility for applying for permissions. This page focuses on the prefix source to control permissions for any applications whose name starts with a given prefix. To use this functionality, you need to enable Fiat to use the new sources and set prefixes as one of the sources. auth.permissions.source.application.prefix.