portainer
Restricting ClusterRoleBinding in Portainer Helm Chart
It seems that the ClusterRoleBinding to the admin ClusterRole is necessary for Portainer to function fully in Kubernetes, particularly for deployments beyond Edge compute features. This enables the option to disable RBAC when full Kubernetes cluster management is not needed.
The current Portainer Helm chart does not provide an option to disable the RBAC-related templates, including ClusterRoleBinding creation, via the values file. This lack of configurability prevents us from aligning with our security requirements.
A proposed solution would be to include a flag in the values file like: enableRBAC: true/false and create the RBAC template accordingly
A PR is created with the proposed changes: https://github.com/portainer/k8s/pull/151
