[
https://issues.apache.org/jira/browse/FLINK-35310?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gyula Fora closed FLINK-35310.
------------------------------
Fix Version/s: kubernetes-operator-1.9.0
Resolution: Fixed
merged to main f21ed8d28b1e50ffe8300fc7694641280ecb6628
> Replace RBAC verb wildcards with actual verbs
> ---------------------------------------------
>
> Key: FLINK-35310
> URL: https://issues.apache.org/jira/browse/FLINK-35310
> Project: Flink
> Issue Type: Improvement
> Components: Kubernetes Operator
> Environment: Running on Kubernetes using the flink-operator version
> 1.8.0
> Reporter: Tim
> Assignee: Tim
> Priority: Major
> Labels: pull-request-available
> Fix For: kubernetes-operator-1.9.0
>
>
> We are deploying the flink operator on a managed Kubernetes cluster which
> utilizes [Kyverno Policy Management|https://kyverno.io/] and all it's default
> rules. Not complying to certain rules, leads to a restriction in deploying.
> As we are using Helm to build the manifest files (which is super useful) I
> recognized that in the RBAC template "wildcards" are being used for all verbs
> ("*").
> This violates the following Kyverno ruleset:
> [https://kyverno.io/policies/other/restrict-wildcard-verbs/restrict-wildcard-verbs/]
> Besides that I think that it would also be cleaner to explicitly list the
> needed verbs instead of just using the star symbol as a wildcard.
> I have already attempted to change this in a fork as a demonstration how it
> could be changed to be conform. Please take a look and I would greatly
> appreciate a change in that direction.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
