PSP Removal Phase 3: tidy up PSP leftovers - Githubissues

ministryofjustice / cloud-platform

Documentation on the MoJ cloud platform

MIT License

87 stars 45 forks source link

PSP Removal Phase 3: tidy up PSP leftovers #4942

Closed jaskaransarkaria closed 11 months ago

jaskaransarkaria commented 1 year ago

Background

Remove role bindings used to set up the PSP bypass
find and remove references to audit
remove PSP tests (and remove the need for the bypassPspRoleName variable in templates)
remove any orphaned tf state/ resources (eg psp:0-super-privieged)
remove rolebindings from -> (cluster-autoscaler, overprovision, external-secrets-operator, starter-pack)

Definition of done

[ ] readme has been updated
[ ] user docs have been updated
[ ] another team member has reviewed
[ ] smoke tests are green
[ ] prepare demo for the team

Reference

How to write good user stories

sj-williams commented 11 months ago

Removed superpriv psp rolebinding resources from infra components:

https://github.com/ministryofjustice/cloud-platform-infrastructure/pull/2638