search

lightbend / cloudflow

Cloudflow enables users to quickly develop, orchestrate, and operate distributed streaming applications on Kubernetes.
https://cloudflow.io
Apache License 2.0
321 stars 89 forks source link

Cluster Admin Role - have the option to NOT require this role. #995

Open michael-read opened 3 years ago

michael-read commented 3 years ago

Is your feature request related to a problem? Please describe. Sometimes potential users of Cloudflow have highly secured clusters, and they don't trust ANYONE. So the requirement for Cluster Admin Role is a huge Red Flag.

Is your feature request related to a specific runtime of cloudflow or applicable for all runtimes? All runtimes

Describe the solution you'd like Open for Discussion

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context Lets begin by listing all the things we currently need cluster admin role for. My guesses are:

What would be required by an admin if the admin role was taken away?

Solutions?:

michael-read commented 3 years ago

Also remove the need for the CF-operator to run as root.

andreaTP commented 3 years ago

Also remove the need for the CF-operator to run as root.

@michael-read do you mind to open a separate issue for this? Is definitely not related.

michael-read commented 3 years ago

My bad, poor assumption. New issue created -> https://github.com/lightbend/cloudflow/issues/997

RayRoestenburg commented 3 years ago

This is possible, we need to remove the installation of CRD from the Cloudflow Operator and move this to the helm charts.