cloudflow
cloudflow copied to clipboard
Cluster Admin Role - have the option to NOT require this role.
Is your feature request related to a problem? Please describe. Sometimes potential users of Cloudflow have highly secured clusters, and they don't trust ANYONE. So the requirement for Cluster Admin Role is a huge Red Flag.
Is your feature request related to a specific runtime of cloudflow or applicable for all runtimes? All runtimes
Describe the solution you'd like Open for Discussion
Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.
Additional context Lets begin by listing all the things we currently need cluster admin role for. My guesses are:
- creating namespaces
- deploying / undeploying apps
- And for Akka Data Pipelines / Prometheus scraping from those namespaces plus health checks, metrics, etc.
What would be required by an admin if the admin role was taken away?
Solutions?:
- Improve namespace support
- remove need for cluster-admin rights
Also remove the need for the CF-operator to run as root.
Also remove the need for the CF-operator to run as root.
@michael-read do you mind to open a separate issue for this? Is definitely not related.
My bad, poor assumption. New issue created -> https://github.com/lightbend/cloudflow/issues/997
This is possible, we need to remove the installation of CRD from the Cloudflow Operator and move this to the helm charts.