Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restricting ClusterRoleBinding in Portainer Helm Chart #150

Open
emagiz opened this issue Oct 2, 2024 · 1 comment
Open

Restricting ClusterRoleBinding in Portainer Helm Chart #150

emagiz opened this issue Oct 2, 2024 · 1 comment

Comments

@emagiz
Copy link

emagiz commented Oct 2, 2024

It seems that the ClusterRoleBinding to the admin ClusterRole is necessary for Portainer to function fully in Kubernetes, particularly for deployments beyond Edge compute features. This enables the option to disable RBAC when full Kubernetes cluster management is not needed.

The current Portainer Helm chart does not provide an option to disable the RBAC-related templates, including ClusterRoleBinding creation, via the values file. This lack of configurability prevents us from aligning with our security requirements.

A proposed solution would be to include a flag in the values file like: enableRBAC: true/false and create the RBAC template accordingly

@emagiz
Copy link
Author

emagiz commented Oct 2, 2024

A PR is created with the proposed changes: #151

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant