kubeflow / kubeflow/mpi-operator
RBAC without wildcard
- Dominant language
- Go
- Stars
- 535
- Forks
- 238
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 10
Description
I want to utilize mpi-operator without wildcard in clusterrole but cannot specify verbs that the component needs.
Can I get some support or updated version of clusterrole for mpi-operator?
The clusterrole for mpi-operator is like below;
manifests/base/cluster-role.yaml
https://github.com/kubeflow/mpi-operator/blob/671d90a9133268744d75949b8eceb566122bb63a/manifests/base/cluster-role.yaml#L1-L163
Contributor guide
Research direction
Start with manifests/base/cluster-role.yaml and identify which wildcard permissions mpi-operator currently requests. Determine the specific resources and verbs required, then update the ClusterRole so it grants only those permissions; done means the manifest no longer relies on wildcard access while retaining the operator's needed permissions.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- authorization, infrastructure
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100