apache / apache/ozhera

[enhancement] Convergence of OzHera Kubernetes Permissions

Open
#209 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
122
Forks
46
Avg merge
11h 56m
Merged PRs (30d)
9

Description

When deploying OzHera using the ozhera-operator, a 'mione-admin' service account is automatically created, which is bound to the 'cluster-admin' role.
This role grants extensive permissions. In practical scenarios, we have observed that many enterprises deploying private Kubernetes clusters prefer OzHera to have reduced privileges. After the successful deployment of the OzHera operator, there is a desire to minimize and converge the cluster permissions.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.