kubeflow / kubeflow/mpi-operator

RBAC without wildcard

Open
#755 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
535
Forks
238
Avg merge
2d 3h
Merged PRs (30d)
10

Description

I want to utilize mpi-operator without wildcard in clusterrole but cannot specify verbs that the component needs.
Can I get some support or updated version of clusterrole for mpi-operator?
The clusterrole for mpi-operator is like below;

manifests/base/cluster-role.yaml
https://github.com/kubeflow/mpi-operator/blob/671d90a9133268744d75949b8eceb566122bb63a/manifests/base/cluster-role.yaml#L1-L163

Contributor guide

Open the contributing guide

Research direction

Start with manifests/base/cluster-role.yaml and identify which wildcard permissions mpi-operator currently requests. Determine the specific resources and verbs required, then update the ClusterRole so it grants only those permissions; done means the manifest no longer relies on wildcard access while retaining the operator's needed permissions.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
authorization, infrastructure
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.