Deploy

Mon, 01 Jan 0001 00:00:00 +0000

Use this guide to install Feature Form with the Helm chart and verify that the core services are healthy.

Install

The default documented path is OIDC-enabled auth plus durable PostgreSQL-backed state.

Authentication and RBAC

Mon, 01 Jan 0001 00:00:00 +0000

Feature Form separates deployment-wide administration from workspace-scoped actions. A workspace is the isolation boundary, but membership and permissions are managed separately through RBAC bindings.

Built-in roles

global_admin for deployment-wide administration and workspace creation
workspace_admin for workspace setup, membership, apply, and audit
operator for operational workflows
viewer for read-only workspace visibility
model for constrained reads of feature views and training sets

Typical handoff

A global admin creates the workspace.
The global admin grants workspace_admin to the intended principal.
That principal verifies access before registering providers or applying resources.

Scope model

Global scope controls deployment-wide actions.
Workspace scope controls providers, secret providers, apply, graph, and audit inside one workspace.
Resource-constrained scope is used for limited serving or training-set access.

Create a workspace and grant access

Use this flow when a global admin is creating a new workspace and handing it off to the team that will manage it.