Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove unnecessary RBAC permission in helm charts #3041

Closed
kaaass opened this issue May 3, 2024 · 0 comments · Fixed by #3040
Closed

Remove unnecessary RBAC permission in helm charts #3041

kaaass opened this issue May 3, 2024 · 0 comments · Fixed by #3040
Labels
bug Something isn't working

Comments

@kaaass
Copy link

kaaass commented May 3, 2024

What would you like to be added:

Remove all the unnecessary RBAC permission in the helm charts.

#1105 may relate to this.

Why is this needed:

Unnecessary rbac permissions can lead to security risks. Currently, the submariner-operator's helm charts have applied for too many permissions it doesn’t need, such as Deployment submariner-operator. Among them, we found that several sensitive permissions may even lead to the hijacking of the cluster under specific attacks. Due to the risk of security disclosure, we have hidden the details of these permissions in the public issue. We have reported this security issue through private email and received confirmation from the community.

@kaaass kaaass added the enhancement New feature or request label May 3, 2024
@tpantelis tpantelis added bug Something isn't working and removed enhancement New feature or request labels May 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants