Request for personal-files confinement for kafkactl snap

[dwi-di]

Hey @emitorino, I thought that the snap package for helm has a similar requirement and uses classic confinement, but I searched the forum and found at least those two requests that are similar to mine:

Request for classic Confinement for Linkerd

Hi, Linkerd is a tool for Kubernetes, that relies on kubectl and its config which lives under ~/.kube, thus the need for classic confinement. For reference, I found this discussion about the same request for Helm, which also relies on kubectl. Thanks in advance!

Helmfile: Classic Confinement?

Hi, I’m trying to build a snap for https://github.com/roboll/helmfile This in theory is pretty easy because it’s just a static binary but I think it might need Classic confinement, much like the snap for Helm itself. However I’m new to building snaps so I’m happy to be told I’m wrong. From my understanding of the tool it needs access to yaml files in the directory you run the command in. It also needs permissions to run Helm. It may also need additional access to hidden directories storing He…

There it is stated that classic confinement for helm was granted some years ago and things are different now.

I gave this some thought and I can probably live without classic but I will need access ~/.kube/ folder in order to read kubectl configs from the default location. For that I would need personal files interfaces.

What do I need to do for that?

While I’m already at it, can I also get access to ~/.config/kafkactl which is the xdg config dir for kafkactl and where people usually expect the config to be.

Thanks for your help.