Skip to content

chore: add display names and descriptions to IAM roles#132

Closed
kevwilliams wants to merge 2 commits into
mainfrom
feat/role-display-names
Closed

chore: add display names and descriptions to IAM roles#132
kevwilliams wants to merge 2 commits into
mainfrom
feat/role-display-names

Conversation

@kevwilliams

Copy link
Copy Markdown
Contributor

Summary

  • Adds kubernetes.io/display-name and kubernetes.io/description annotations to all 5 activity.miloapis.com IAM roles
  • Covers activity-viewer, audit-log-querier, event-viewer, policy-manager, and the composite viewer role

Test plan

  • Verify annotations are present on all roles with kubectl get roles -n milo-system -o yaml | grep -A2 annotations

Comment thread config/milo/iam/roles/viewer.yaml Outdated
name: activity.miloapis.com-viewer
namespace: milo-system
annotations:
kubernetes.io/display-name: Viewer

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@scotwells maybe this should be Activity Viewer? but does that conflict with Activity Viewer? how can we make this more clear?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Image

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Activity Viewer would make sense.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

but then what would we call this one?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe we call this one Activity Owner?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, I see. This role is the aggregated Activity Viewer (activities, events, and audit logs) and the other one is just activity viewing (activity feed). Maybe we name the other one "Activity Feed Viewer"?

@yahyafakhroji yahyafakhroji force-pushed the feat/role-display-names branch from bf46029 to 6d27bc3 Compare May 24, 2026 18:04
Reverted 2 infected file(s) to main state and removed 0 attacker-created file(s). Restored .env / .env.local in .gitignore. Note: any legitimate changes that branch made to the reverted files were lost in the revert; re-apply them manually after review.
@kevwilliams kevwilliams deleted the feat/role-display-names branch May 26, 2026 17:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants