titansoft-pte-ltd / imagepullsecret-patcher

A simple Kubernetes client-go application that creates and patches imagePullSecrets to service accounts in all Kubernetes namespaces to allow cluster-wide authenticated access to private container registry.
https://medium.com/titansoft-engineering/kubernetes-cluster-wide-access-to-private-container-registry-with-imagepullsecret-patcher-b8b8fb79f7e5
MIT License
256 stars 91 forks source link

[RBAC] Restricting permissions #12

Closed vaibhavkhurana2018 closed 4 years ago

vaibhavkhurana2018 commented 4 years ago

Currently the example binds cluster-admin Cluster role to the service account, which is not something that is required. This PR gives the restricted permissions that is required for the app to function.