ameeer-in commented on issue #62875: URL: https://github.com/apache/airflow/issues/62875#issuecomment-6863880292
@kimminw00 I checked the current RBAC templates and chart contribution guidance. The custom-resource permissions are not configurable today, but the guidance appears to place standalone resources and external CRD integrations under Kustomize overlays. Would a tested RBAC overlay be the preferred approach here, or is a chart-level rbac.extra* interface specifically desired? For an overlay, I’d keep permissions explicit, target the selected service accounts, and add authorization checks covering allowed operations and denied unrelated access. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
