ceph / ceph/ceph-csi

Remove unwanted RBAC from the repo

Open
#3,018 1 comment 0 reactions 0 assignees View on GitHub
cleanup component/deployment keepalive Repo activity
Dominant language
Go
Stars
1.6k
Forks
617
Avg merge
5d 10h
Merged PRs (30d)
43

Description

We are having some unwanted RBAC access for both cephfs and rbd. we need to track it down and remove the unwanted access from the templates.

Contributor guide

No contributing guide indexed for this repository

Research direction

Inspect the CephFS and RBD RBAC templates and trace which permissions provide the unwanted access. Compare those permissions with the access each driver requires; the work is done when unnecessary RBAC is removed for both templates without breaking required access.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes
Domain
authorization, infrastructure, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.