tetragon
tetragon copied to clipboard
Don't give operator permissions to create CRDs if not needed
Tetragon Operator has an option to skip CRD creation, but even if it's used, the operator ClusterRole still contains permissions to create CRDs. For slightly better security hygiene, these permissions can be included conditionally, only if needed.