-
Notifications
You must be signed in to change notification settings - Fork 57
Open
Description
Search before asking
- I had searched in the issues and found no similar issues.
Description
Before deploying the Doris Operator to the Kubernetes cluster, our Kubernetes team determined that for Kubernetes clusters running multiple applications, the resource and permission requirements of the current doris-operator pose certain security risks:
ClusterRole
of the doris-operator has the rule ofClusterRoleBinding
creation and deletion. It could potentially modify the permissions of current and otherServiceAccount
s;- doris-operator requires webhook resources. It may degrade Kubernetes cluster event-processing efficiency, and could even cause cluster-level failures due to improper event handling in the hook.
Solution
Are webhooks and updating cluster-role-binding necessary for doris-operator? Can we remove them?
Are you willing to submit PR?
- Yes I am willing to submit a PR!
Code of Conduct
- I agree to follow this project's Code of Conduct
Metadata
Metadata
Assignees
Labels
No labels