Skip to content

Guide on working without RBAC Manager - #872

Open
patrykorwat wants to merge 3 commits into
crossplane:masterfrom
patrykorwat:no-rbac-manager-guide
Open

patrykorwat wants to merge 3 commits into
crossplane:masterfrom
patrykorwat:no-rbac-manager-guide

Conversation

@patrykorwat

Copy link
Copy Markdown

Adds a guide on how to work with Crossplane without RBAC Manager, to have better control of permissions in the cluster.

see crossplane/crossplane#6135

Patryk Orwat added 3 commits February 3, 2025 16:24
Signed-off-by: Patryk Orwat <patryk.orwat@nokia.com>
Signed-off-by: Patryk Orwat <patryk.orwat@nokia.com>
Signed-off-by: Patryk Orwat <patryk.orwat@nokia.com>
@netlify

netlify Bot commented Feb 4, 2025 •

Copy link
Copy Markdown

✅ Deploy Preview for crossplane ready!

Name Link
🔨 Latest commit 4949af2
🔍 Latest deploy log https://app.netlify.com/sites/crossplane/deploys/67a22e28c8b9700008fb45ee
😎 Deploy Preview https://deploy-preview-872--crossplane.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 79 (🟢 up 5 from production)
Accessibility: 90 (🔴 down 2 from production)
Best Practices: 83 (no change from production)
SEO: 100 (no change from production)
PWA: 70 (no change from production)
View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify site configuration.

```
Once installed, save provider service account name
```sh
SA=$(kubectl -n crossplane-system get sa -o name | grep provider-kubernetes | sed -e 's|serviceaccount\/||g')

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we use here a DeploymentRuntimeConfig with a static ServiceAccountName otherwise it will change by every release update by the provider ?!

name: provider-kubernetes-aggregate
subjects:
- kind: ServiceAccount
name: ${SA}

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here - then you can use the static Name

name: cluster-admin
subjects:
- kind: ServiceAccount
name: ${SA}

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants