[ 
https://issues.apache.org/jira/browse/FLINK-33633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17795452#comment-17795452
 ] 

Ryan van Huuksloot commented on FLINK-33633:
--------------------------------------------

Would there be any appetite to have the operator create just a ClusterRole for 
Flink?

We can then leave the RoleBinding to the specific deployment to not scope 
creep. It at least removes one extra resource per deployment. I think this 
would be safe.

> Automatic creation of RBAC for instances of Flink Deployments
> -------------------------------------------------------------
>
>                 Key: FLINK-33633
>                 URL: https://issues.apache.org/jira/browse/FLINK-33633
>             Project: Flink
>          Issue Type: Improvement
>          Components: Kubernetes Operator
>    Affects Versions: kubernetes-operator-1.7.0
>            Reporter: Tony Garrard
>            Priority: Not a Priority
>
> Currently users have to manually create RBAC e.g. the flink service account. 
> When operator is watching all namespaces; creation of a FlinkDeployment in a 
> specific namespace may fail if the kube admin has failed to create the 
> required RBAC. To improve usability the operator could be coded to 
> automatically create these rbac resources in the instance namespace if not 
> present



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to