[ 
https://issues.apache.org/jira/browse/FLINK-26308?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17499028#comment-17499028
 ] 

Márton Balassi commented on FLINK-26308:
----------------------------------------

Hi [~wangyang0918],

Fair point, my approach is to tie it to the 
[watchNamespaces|https://github.com/apache/flink-kubernetes-operator/blob/main/helm/flink-operator/values.yaml#L25]
 value, if the user specifies multiple values there we would create the RBAC 
for each namespace. If it is left empty we would keep the current behavior.

> Remove need for flink-operator clusterrole
> ------------------------------------------
>
>                 Key: FLINK-26308
>                 URL: https://issues.apache.org/jira/browse/FLINK-26308
>             Project: Flink
>          Issue Type: Sub-task
>          Components: Kubernetes Operator
>            Reporter: Márton Balassi
>            Assignee: Márton Balassi
>            Priority: Major
>
> Currently we create a clusterrole for the operator, where a namespaced role 
> would be sufficient. We should remove the global role as that could cause 
> friction for some users.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to