noobaa / noobaa-operator

Operator for NooBaa - object data service for hybrid and multi cloud environments :cloud: :wrench:
https://www.noobaa.io
Apache License 2.0
103 stars 101 forks source link

Fixing SCC issues for bucket logging #1391

Closed jackyalbo closed 3 months ago

jackyalbo commented 4 months ago

Explain the changes

  1. Added SA/Role/Rolebinding for noobaa-core pod. As I don't think any additional SSC caps over noobaa-db used this SCC
  2. Fixed noobaa-endpoint SCC to use MustRunAs instead RunAsAny to avoid inner namespace s3linux labeling - which blocks access between endpoints and core and between endpoints.

Issues: Fixed #xxx / Gap #xxx

Testing Instructions: