Blaine Gardner 684fe30126 core: limit use of wildcards in cluster-scoped rbac ...

Rook needs to be able to watch all `ceph.rook.io` resources to reconcile
them; however, it does not need blanket verb privileges. Reduce the
privileges as much as possible.

Ideally, Rook would only have update permissions to status and
finalizers of resources; however, finalizers are not a full-fledged
subresource at this time, and "update" permissions must be maintained
for `ceph.rook.io` resources.

Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>

2022-01-05 17:10:14 -07:00

..

charts

core: limit use of wildcards in cluster-scoped rbac

2022-01-05 17:10:14 -07:00

examples

core: limit use of wildcards in cluster-scoped rbac

2022-01-05 17:10:14 -07:00

olm

build: use the same csv name for all platforms

2022-01-04 14:15:22 +01:00