Drop cluster-admin for eventing controller #207
Milestone
Comments
|
From #113 :
|
scothis
added a commit
to scothis/eventing
that referenced
this issue
Aug 15, 2018
Buses can create dispatcher and provision deployments. Previously, these deployments were created in the same namespace as the Bus resource, which required RBAC rules to be configured to enable the deployments to read and update Bus, Channel and Subscription resources. By moving these deployments into the knative-eventing system namespace, we can use a pre-determined service account and RBAC configuration. Since the bus-controller no longer needs to create service accounts and role bindings, the controller can run with reduced privillage (follow knative#207 for that change). Fixes knative#349
scothis
added a commit
to scothis/eventing
that referenced
this issue
Aug 15, 2018
Buses can create dispatcher and provision deployments. Previously, these deployments were created in the same namespace as the Bus resource, which required RBAC rules to be configured to enable the deployments to read and update Bus, Channel and Subscription resources. By moving these deployments into the knative-eventing system namespace, we can use a pre-determined service account and RBAC configuration. Since the bus-controller no longer needs to create service accounts and role bindings, the controller can run with reduced privillage (follow knative#207 for that change). Fixes knative#349
knative-prow-robot
pushed a commit
that referenced
this issue
Aug 15, 2018
* Move bus deployments to knative-eventing Buses can create dispatcher and provision deployments. Previously, these deployments were created in the same namespace as the Bus resource, which required RBAC rules to be configured to enable the deployments to read and update Bus, Channel and Subscription resources. By moving these deployments into the knative-eventing system namespace, we can use a pre-determined service account and RBAC configuration. Since the bus-controller no longer needs to create service accounts and role bindings, the controller can run with reduced privillage (follow #207 for that change). Fixes #349 * Update logging instructions
|
This is a dup of #749 |
|
/close |
|
@evankanderson: Closing this issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This is configured here.
In Serving we create a custom role here.
cc @vaikas-google
The text was updated successfully, but these errors were encountered: