portainer / k8s

How to deploy Portainer inside a Kubernetes environment.
MIT License
88 stars 58 forks source link

Portainer server ServiceAccount #141

Open tmarback opened 7 months ago

tmarback commented 7 months ago

Hello,

I noticed that, with the manifests (or the Helm template) in this repository, the pods for the Portainer server mount a service account with cluster-admin access. However, if I understand correctly, all interactions that Portainer has with Kubernetes are done through the agent, not directly by the server. Is there a reason why the server's pods also need cluster admin access to run?

samdulam commented 7 months ago

Don't need an agent to manage the cluster where Portainer Server is running. Only need to deploy agents to clusters other clusters that you would need to manage.