elastic / elastic/eck-diagnostics

Improve README spell out RBAC requirements

Open
#70 1 comment 4 reactions 0 assignees View on GitHub
documentation
Dominant language
Go
Stars
29
Forks
21
Avg merge
3d 13h
Merged PRs (30d)
10

Description

We have not spelled out the specific RBAC requirements because of the assumption that the tool will always be run by admins. But that is certainly something we can improve in the README file for the diagnostic tool to enable restricted users to run it.

The user running the tool needs read access to all the resources listed here https://github.com/elastic/eck-diagnostics#information-collected-by-eck-diagnostics

The user also needs to be able to collect logs from all the Pods running Elastic Stack applications in the workload namespaces as well as all logs from all Pods in the namespace the operator runs in (typically `elastic-system`). This means `get`/`list` permissions on the `pods/logs` sub-resource.

If the user wants to extract stack diagnostics as well then additional permissions are needed to deploy and delete Pods into the workload namespaces and to `exec` into those Pods (`pods/exec` sub-resource) .

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.