More restrict permissions #563
Labels
kind/feature
Categorizes issue or PR as related to a new feature.
needs-triage
Indicates an issue or PR lacks a `triage/foo` label and requires one.
User Story
As an operator I would like to have the operator have less RBAC permissions, so that a bug in the operator can't accidentally do bad things.
Detailed Description
The role.yaml looks like this at the moment:
https://github.com/kubernetes-sigs/cluster-api-operator/blob/main/config/rbac/role.yaml
At the moment
manager-role
can do everything. Is this needed?/kind feature
The text was updated successfully, but these errors were encountered: