ozhera icon indicating copy to clipboard operation
ozhera copied to clipboard

[enhancement] Convergence of OzHera Kubernetes Permissions

Open sadadw1 opened this issue 1 year ago • 0 comments

When deploying OzHera using the ozhera-operator, a 'mione-admin' service account is automatically created, which is bound to the 'cluster-admin' role. This role grants extensive permissions. In practical scenarios, we have observed that many enterprises deploying private Kubernetes clusters prefer OzHera to have reduced privileges. After the successful deployment of the OzHera operator, there is a desire to minimize and converge the cluster permissions.

sadadw1 avatar Dec 22 '23 08:12 sadadw1