Files
my-rook-config/deploy/examples
Blaine Gardner 684fe30126 core: limit use of wildcards in cluster-scoped rbac
Rook needs to be able to watch all `ceph.rook.io` resources to reconcile
them; however, it does not need blanket verb privileges. Reduce the
privileges as much as possible.

Ideally, Rook would only have update permissions to status and
finalizers of resources; however, finalizers are not a full-fledged
subresource at this time, and "update" permissions must be maintained
for `ceph.rook.io` resources.

Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
2022-01-05 17:10:14 -07:00
..
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-12-08 17:24:56 +01:00
2021-12-08 17:24:56 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-12-17 15:00:45 -07:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00
2021-11-30 09:12:53 +01:00

For documentation on running Rook in your Kubernetes cluster see the Kubernetes Quickstart Guide