charts
charts copied to clipboard
Bug: Unnecessary permissions
Hi community!
I just found that the Daemonsets kured in the charts has patch
verbs of the daemonsets
resource and delete verb of the pods resource (clusterrole.yaml) and role.yaml). However, after reading the source code of kured, I didn't find any Kubernetes API usages that require these permissions. Therefore, for security reasons, I suggest checking these permissions to determine if they are truly unnecessary. If they are, the issue should be fixed by removing the unnecessary permission or or other feasible methods.