Skip to content
This repository has been archived by the owner on Aug 12, 2024. It is now read-only.

Evaluate the requirement for having admin level permissions for rukpak controller #800

Open
varshaprasad96 opened this issue Jan 16, 2024 · 2 comments

Comments

@varshaprasad96
Copy link
Member

varshaprasad96 commented Jan 16, 2024

Currently, we specify rukpak controller to have admin level permissions:

//+kubebuilder:rbac:groups=*,resources=*,verbs=*

This seems to be required to be able to manage the lifecycle of bundle resources effectively.

This issue is to evaluate the requirement for having this level of elevated permissions (Even if the outcome could be that we need to have it this way).

@varshaprasad96 varshaprasad96 changed the title Evaluate the requirement for having admin level permissions to rukpak controller Evaluate the requirement for having admin level permissions for rukpak controller Jan 16, 2024
Copy link

This issue has become stale because it has been open 60 days with no activity. The maintainers of this repo will remove this label during issue triage or it will be removed automatically after an update. Adding the lifecycle/frozen label will cause this issue to ignore lifecycle events.

@github-actions github-actions bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Mar 18, 2024
@skattoju
Copy link

we would still need list and watch on all objects even after using the service account provided in spec right ?
//+kubebuilder:rbac:groups=*,resources=*,verbs=list;watch

@github-actions github-actions bot removed the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Jun 16, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants