You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Many of the Cloud Paks installations have dependencies on having the cluster-admin role assigned to the user performing the installation. This is often unnecessary and a problem for many installations, where security policy require minimum privilege assigned to all roles.
To Reproduce
N/A, stated in the installation section of product documentation:
Expected behavior
Remove the assignment of cluster-admin roles to the ArgoCD openshift-gitops-argocd-application-controller service account and replace it with the creation of new Role (or ClusterRole) with the minimum set of privileges required to install the product.
Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered:
CP4BA and CP4D have since introduced support for this type of installation, where the cluster admin can authorize a service account with narrower privileges, dedicated to the sole purpose of installing the Pak.
Describe the bug
Many of the Cloud Paks installations have dependencies on having the
cluster-admin
role assigned to the user performing the installation. This is often unnecessary and a problem for many installations, where security policy require minimum privilege assigned to all roles.To Reproduce
N/A, stated in the installation section of product documentation:
Expected behavior
Remove the assignment of
cluster-admin
roles to the ArgoCDopenshift-gitops-argocd-application-controller
service account and replace it with the creation of newRole
(orClusterRole
) with the minimum set of privileges required to install the product.Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: