ozhera
ozhera copied to clipboard
[enhancement] Convergence of OzHera Kubernetes Permissions
When deploying OzHera using the ozhera-operator, a 'mione-admin' service account is automatically created, which is bound to the 'cluster-admin' role. This role grants extensive permissions. In practical scenarios, we have observed that many enterprises deploying private Kubernetes clusters prefer OzHera to have reduced privileges. After the successful deployment of the OzHera operator, there is a desire to minimize and converge the cluster permissions.