Can I create custom roles with this skill?

Yes, the skill provides patterns for defining Roles that group specific permissions or inherit from existing roles to create complex access structures.

Is manual code integration required for authorization?

No, Milo services integrate with IAM declaratively through YAML configurations, and this skill provides the templates and best practices for that process.

How does this skill handle permission inheritance?

It guides users in defining parentResources within ProtectedResource YAMLs, allowing permissions to flow from Organizations to Projects and child resources.

What is the primary purpose of the Milo IAM skill?

It helps developers implement and manage the Identity and Access Management system for the Milo control plane using Kubernetes-native declarations.

What API group does the Milo IAM system use?

All IAM resources managed by this skill reside in the iam.miloapis.com/v1alpha1 API group.

Milo IAM Configuration

Name: Milo IAM Configuration
Author: datum-cloud

bydatum-cloud

•

Cloud Infrastructure

Manages identity and access control for the Milo platform by defining protected resources, service roles, and policy bindings.

This skill provides comprehensive guidance for implementing and managing the Kubernetes-native IAM system within the Milo control plane. It enables developers to define ProtectedResources for new services, create hierarchical roles (Viewer, Editor, Admin), and establish PolicyBindings to grant permissions to users or groups. By using declarative YAML patterns, the skill ensures consistent authorization enforcement across the Datum Cloud ecosystem, facilitating secure resource inheritance from organizations down to specific projects and workloads.

Key Features

01Declarative definition of ProtectedResources and custom permissions

022 GitHub stars

03Hierarchical role management with support for permission inheritance

04Namespace-scoped and cluster-wide PolicyBindings for users and groups

05Automated validation guidance for IAM resource YAML structures

06Standardized Viewer, Editor, and Admin role pattern implementation

Use Cases

01Implementing authorization for a new service resource type in Milo

02Defining custom service roles with inherited permissions

03Setting up organization-wide or project-specific access controls

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add datum-cloud/claude-code-plugins milo-iam

For use in Claude.ai and ChatGPT

Download Skill