RBAC permissions constraint

[sbocinec]

Hello local-path-provisioner community!

Security scanners in our org complain about excessive RBAC permissions granted to local-path-provisioner through the local-path-provisioner-role ClusterRole, specifically * granted for ["endpoints", "persistentvolumes", "pods"].

I wonder, does the provisioner indeed requires these excessive permissions? I'm currently checking the code to understand if we can constraint it in our deployment, though if anyone did something similar, I would appreciate if you can share your experience.

Thanks!

[github-actions]

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

[sbocinec]

I'm closing the issue as the PR #336 constraining the permissions has been already merge a year ago