Kubernetes operator to manage installation, updation and uninstallation of tektoncd projects (pipeline, …)
438
stars
188
forks
source link
GKE dashboard complains on `Potentially insecure RBAC configurations ` for tekton operator release v0.69.1 #1953
Open
zhaohua-jiang opened 7 months ago
Expected Behavior
No such security warnings after installed tekton operator in GKE cluster.
Actual Behavior
GKE dashboard displayed following warning message:
the security bulletin link in ☝️ picture is: https://cloud.google.com/anthos/clusters/docs/security-bulletins?&_ga=2.128984265.-452443447.1705546487#gcp-2024-003
Steps to Reproduce the Problem
Additional Info
Executed following commands according to the GKE security guide (https://cloud.google.com/kubernetes-engine/docs/best-practices/rbac?&_ga=2.131869514.-452443447.1705546487#default-roles-groups ) to list the names of any ClusterRoleBindings with the subject system:anonymous, system:unauthenticated, or system:authenticated: