Open invidian opened 4 years ago
So kube-apiserver can use root user (as it needs to have access to trigger compaction, see etcd-io/etcd#8458) and then Prometheus Operator can have certificates with no access to data.
kube-apiserver
Also relevant #98.
See also https://github.com/etcd-io/etcd/issues/8458.
So
kube-apiserver
can use root user (as it needs to have access to trigger compaction, see etcd-io/etcd#8458) and then Prometheus Operator can have certificates with no access to data.