Skip to content
This repository has been archived by the owner on Mar 3, 2023. It is now read-only.

Heron Helm chart should not use cluster-admin role #3615

Closed
nicknezis opened this issue Sep 14, 2020 · 2 comments · Fixed by #3618
Closed

Heron Helm chart should not use cluster-admin role #3615

nicknezis opened this issue Sep 14, 2020 · 2 comments · Fixed by #3618
Labels
Kubernetes

Comments

@nicknezis
Copy link
Contributor

Is your feature request related to a problem? Please describe.
The current Helm chart uses cluster-admin role. There should be a custom role with specific permissions. This current configuration is a blocker for components wanting to install Heron Helm chart from within Kubernetes without themselves having cluster-admin role permissions.

Describe the solution you'd like
The Heron Helm chart should have a custom role with the actual permissions required.
@the-scott-hand the-scott-hand mentioned this issue Sep 14, 2020
Merged
@joshfischer1108
Copy link
Member

Should this be address before the next release candidate?

@nicknezis nicknezis linked a pull request Nov 22, 2020 that will close this issue
Stop using "cluster admin" role and restrict to ns #3618
Merged
@nicknezis
Copy link
Contributor Author

I believe the merged PR fixes this. Closing the issue.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
Kubernetes
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Stop using "cluster admin" role and restrict to ns the-scott-hand/incubator-heron
2 participants
@nicknezis @joshfischer1108