Question about configuring policy per user vs. cluster

[brandonkal]

Expected Behaviour

Currently dockerfile functions are allowed universally in the cluster or not. It would be nice to be able to share a cloud while forcing most users to use one of the cluster-approved templates.

Current Behaviour

It's either enabled or not.

Possible Solution

Add a new option "acl". If set, check if the username in the CUSTOMERS file has " dockerfile" listed:

admin-username dockerfile
squire

This solution keeps things simple.

[alexellis]

Can you tell us more about your usecase?

[alexellis]

/set title: Question about configuring policy per user vs. cluster

[brandonkal]

Sure. I would like to deploy an OpenFaaS cloud cluster where only "admin" users can use the dockerfile template. This allows the admin user to experiment with other workloads while keeping the cluster a little more locked down for standard users to encourage the use of templates.