[enhancement] Convergence of OzHera Kubernetes Permissions
Open
enhancement
- Dominant language
- Java
- Stars
- 122
- Forks
- 46
- Avg merge
- 11h 56m
- Merged PRs (30d)
- 9
Description
When deploying OzHera using the ozhera-operator, a 'mione-admin' service account is automatically created, which is bound to the 'cluster-admin' role.
This role grants extensive permissions. In practical scenarios, we have observed that many enterprises deploying private Kubernetes clusters prefer OzHera to have reduced privileges. After the successful deployment of the OzHera operator, there is a desire to minimize and converge the cluster permissions.
Contributor guide
Assessment
This issue has not been assessed yet.