search

aiven / aiven-operator

Provision and manage Aiven Services from your Kubernetes cluster.
https://aiven.github.io/aiven-operator
Apache License 2.0
33 stars 20 forks source link

feat: operator watched namespaces #807

Open iul1an opened 1 month ago

iul1an commented 1 month ago

By default, the Aiven Operator is configured to discover resources, including Kubernetes secrets, across the entire cluster. To minimize the potential attack surface and enhance security, I would like to be able to restrict the Aiven Operator's access to only specific Kubernetes namespaces. This targeted access control helps limit the operator's permissions, ensuring it can only interact with the resources within the designated namespaces, thereby reducing the risk of unauthorized access or exposure of sensitive data.

rriski commented 5 days ago

Hey @iul1an, thanks for raising the issue and for the contribution! Controlling operator access to a subset of namespaces is valuable and something we would like to support. We'll prioritise reviewing the contribution in the near future.