Make product service accounts configurable - Githubissues

stackabletech / issues

This repository is only for issues that concern multiple repositories or don't fit into any specific repository

2 stars 0 forks source link

Make product service accounts configurable #630

Open razvan opened 3 months ago

razvan commented 3 months ago

Description

Stackable operators create service accounts for each stacklet they manage.

This has multiple problems:

it's a waste of resources. These SAs are basically the same.
it requires additional RBAC permissions for the operators themselves
it's not (easily) configurable by users.

Tasks

[ ] Let package managers (Helm, OLM) deploy the product service accounts.
[ ] Cleanup operator code and RBAC rules.
[ ] Allow users to override the product SAs by adding a new field aptly named serviceAccountName to the product CRDs.
[ ] Document the defaults and what users can change
[ ] Write tests.