prevent operators from granting extra roles

integr8ly / application-monitoring-operator

Operator for installing the Application Monitoring Stack on OpenShift (Prometheus, AlertManager, Grafana)

Apache License 2.0

30 stars 44 forks source link

prevent operators from granting extra roles #7

Closed pb82 closed 5 years ago

pb82 commented 5 years ago

The monitoring operator role needs to have (at least) all permissions that the roles it creates (or indirectly creates) have. Thanks @aidenkeating for figuring this out!