Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RBAC: restrict SeedImage controller auth to fleet-default #864

Merged
merged 2 commits into from
Oct 7, 2024
Merged

RBAC: restrict SeedImage controller auth to fleet-default #864

merged 2 commits into from
Oct 7, 2024

Commits on Oct 4, 2024

  1. RBAC: restrict SeedImage controller auth to fleet-default 

    do not allow the seedimage-controller to operate on pods, services and
configmaps outside of the fleet-default namespace.

Fixes rancher#457

Signed-off-by: Francesco Giudici <francesco.giudici@suse.com>
    @fgiudici
    fgiudici committed Oct 4, 2024
    Configuration menu
    Copy the full SHA
    fadccc9 View commit details
    Browse the repository at this point in the history

  2. RBAC: move all rbac resources to rbac.yaml 

    Also have all of them collected and generated via kustomize

Signed-off-by: Francesco Giudici <francesco.giudici@suse.com>
    @fgiudici
    fgiudici committed Oct 4, 2024
    Configuration menu
    Copy the full SHA
    12cca50 View commit details
    Browse the repository at this point in the history