-
Notifications
You must be signed in to change notification settings - Fork 24
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
composable manager has no rights to view or create resources #104
Comments
Hey @lhriley First of all, thx a lot for your contributions! As stated here, #105 (comment): Opening up the access for composable-operator introduces quite a few side-channel attack vectors, limiting the security of the cluster. I'd suggest we introduce a new kustomize target, that patches in cluster wide access, so it's an explicit choice by the user rather than an implicit catch-all |
I think that's a fair proposal. I mentioned in my reply on the PR comment about a middle ground "opt-in" approach where the end user can make the decision via |
Get fails:
Create fails:
The text was updated successfully, but these errors were encountered: