-
Notifications
You must be signed in to change notification settings - Fork 141
Closed
Labels
area/securityFor security best practicesFor security best practicesrefinedRequirements are refined and the issue is ready to be implemented.Requirements are refined and the issue is ready to be implemented.size/smallEstimated to be completed within ~2 daysEstimated to be completed within ~2 days
Milestone
Description
As a potential user of NKG that wants to run NKG on a permission restricted cluster
I want the NKG controller to run with the least privileges it needs to operate
So that I can run NKG in my permission restricted cluster.
Acceptance
- Ensure that the privileges on the pod are restricted to only what is necessary
- Ensure that RBAC permissions for the service account associated with NKG pods are restricted to only what is necessary.
Metadata
Metadata
Assignees
Labels
area/securityFor security best practicesFor security best practicesrefinedRequirements are refined and the issue is ready to be implemented.Requirements are refined and the issue is ready to be implemented.size/smallEstimated to be completed within ~2 daysEstimated to be completed within ~2 days