elastic / elastic/eck-diagnostics
Improve README spell out RBAC requirements
- Dominant language
- Go
- Stars
- 29
- Forks
- 21
- Avg merge
- 3d 13h
- Merged PRs (30d)
- 10
Description
We have not spelled out the specific RBAC requirements because of the assumption that the tool will always be run by admins. But that is certainly something we can improve in the README file for the diagnostic tool to enable restricted users to run it.
The user running the tool needs read access to all the resources listed here https://github.com/elastic/eck-diagnostics#information-collected-by-eck-diagnostics
The user also needs to be able to collect logs from all the Pods running Elastic Stack applications in the workload namespaces as well as all logs from all Pods in the namespace the operator runs in (typically `elastic-system`). This means `get`/`list` permissions on the `pods/logs` sub-resource.
If the user wants to extract stack diagnostics as well then additional permissions are needed to deploy and delete Pods into the workload namespaces and to `exec` into those Pods (`pods/exec` sub-resource) .
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.