feat: Add ability to control RBAC within a member's namespace #2

Merged
merenber merged 1 commits from ztseguin/manifests:feat-ns-rbac into master 2022-01-10 00:05:41 -05:00
Owner

See https://kubernetes.io/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping for how Kubernetes prevents privilege escalation with this.

This is important for creating restricted permissions within the namespace for application components - in particular those that require API server access.

See https://kubernetes.io/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping for how Kubernetes prevents privilege escalation with this. This is important for creating restricted permissions within the namespace for application components - in particular those that require API server access.
ztseguin added 1 commit 2022-01-09 13:26:37 -05:00
merenber merged commit c9acdbc9e6 into master 2022-01-10 00:05:41 -05:00
merenber deleted branch feat-ns-rbac 2022-01-10 00:05:42 -05:00
Sign in to join this conversation.
No reviewers
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: cloud/manifests#2
No description provided.