RBAC Role for OpenShift should allow get/list for DeploymentConfigs

cyberark / kubernetes-conjur-deploy

Scripts for deploying DAP followers to Kubernetes and OpenShift given an existing DAP master cluster

Apache License 2.0

14 stars 15 forks source link

RBAC Role for OpenShift should allow get/list for DeploymentConfigs #157

Closed diverdane closed 4 years ago

diverdane commented 4 years ago

The current permissions that are included in openshift/conjur-authenticator-role.yaml do not include get and list permissions for DeploymentConfig resources in OpenShift. These permissions are required in order to allow users to use authn-k8s authentication that is based on DeploymentConfig application identity (e.g. Conjur policies that include DeploymentConfig identity as an annotation).