Is your feature request related to a problem? Please describe.
Authorino performs kube-apiserver calls to evaluate permissions (e.g. for SubjectAccessReview/ k8s RBAC).
While the underlying issue of low/default Kubernetes client QPS/Burst for SAR calls was fixed via the PR tracked in Kuadrant/authorino#568, the limits remain are not easily configurable by users (e.g. directly using env vars or flags in Authorino Deployment).
Describe the solution you'd like
Expose configuration knobs in the Authorino CR to tune the Kubernetes client rate limits used for internal calls. We could either expose direct knobs or introduce PodSpecTemplate to allow more direct customizations of underlying Authorino Deployment.
Is your feature request related to a problem? Please describe.
Authorino performs kube-apiserver calls to evaluate permissions (e.g. for
SubjectAccessReview/ k8s RBAC).While the underlying issue of low/default Kubernetes client QPS/Burst for SAR calls was fixed via the PR tracked in Kuadrant/authorino#568, the limits remain are not easily configurable by users (e.g. directly using env vars or flags in Authorino Deployment).
Describe the solution you'd like
Expose configuration knobs in the Authorino CR to tune the Kubernetes client rate limits used for internal calls. We could either expose direct knobs or introduce PodSpecTemplate to allow more direct customizations of underlying Authorino Deployment.