Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restricting ClusterRoleBinding in Portainer Helm Chart #150

Open
emagiz opened this issue Oct 2, 2024 · 2 comments
Open

Restricting ClusterRoleBinding in Portainer Helm Chart #150

emagiz opened this issue Oct 2, 2024 · 2 comments

Comments

@emagiz
Copy link
Contributor

emagiz commented Oct 2, 2024

It seems that the ClusterRoleBinding to the admin ClusterRole is necessary for Portainer to function fully in Kubernetes, particularly for deployments beyond Edge compute features. This enables the option to disable RBAC when full Kubernetes cluster management is not needed.

The current Portainer Helm chart does not provide an option to disable the RBAC-related templates, including ClusterRoleBinding creation, via the values file. This lack of configurability prevents us from aligning with our security requirements.

A proposed solution would be to include a flag in the values file like: enableRBAC: true/false and create the RBAC template accordingly

@emagiz
Copy link
Contributor Author

emagiz commented Oct 2, 2024

A PR is created with the proposed changes: #151

@mwoudstra
Copy link
Contributor

fixed by #151

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants