carvel-dev / kapp-controller

Continuous delivery and package management for Kubernetes.
https://carvel.dev/kapp-controller
Apache License 2.0
267 stars 102 forks source link

Document required permissions to deploy kapp-controller #970

Open alexbarbato opened 1 year ago

alexbarbato commented 1 year ago

It would be super helpful to document as a part of the install process for kapp-controller to include the minimum set of permissions so users don't have issues deploying and/or don't potentially over provision permissions.

github-actions[bot] commented 1 year ago

This issue is being marked as stale due to a long period of inactivity and will be closed in 5 days if there is no response.

neil-hickey commented 1 year ago

Hey @alexbarbato ! Thanks for the suggestion, that does seem like a very reasonable request. We do have it documented in our rbac.yml what kind of permissions kapp-controller needs. Do you think this covers your ask?

alexbarbato commented 1 year ago

Thanks @neil-hickey - https://github.com/vmware-tanzu/carvel-kapp-controller/blob/f7e02c8595a5248252b9d36de8856fa489e01886/config/rbac.yml#L10

Is this what you're referring to?

github-actions[bot] commented 1 year ago

This issue is being marked as stale due to a long period of inactivity and will be closed in 5 days if there is no response.