OctopusDeploy / helm-charts

Helm chart for deploying Octopus Deploy into a Kubernetes cluster
Apache License 2.0
8 stars 4 forks source link

Fix permissions when running as worker #286

Closed rain-on closed 1 month ago

rain-on commented 1 month ago

It was found that when running as a worker, the clusterrole (used in deployment-target mode) was still attached to the service account being used to run scritps.

This meant that worker-scripts were able affect the greater cluster.

This fix removes the cluster-rolebinding from the serviceAccount when in worker-mode.

image
changeset-bot[bot] commented 1 month ago

🦋 Changeset detected

Latest commit: ce5883e677bf2cb6d2a7b51f89fa8e5b9c772ede

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package | Name | Type | | ---------------- | ----- | | kubernetes-agent | Patch |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR