You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 3, 2022. It is now read-only.
Currently, when shipperctl is trying to set up the application cluster, it uses the service account that was created when "joining" the two clusters together.
However, this adds an unnecessary step right now, since the service account that we create doesn't have the permission to create CRDs, ClusterRoleBindings, and so on. It's also not safe to give the service account these permissions.
However, the user who is running shipperctl has these permissions, so we should use those permissions and do everything through the current user's context, who has to be an administrator anyway.
The text was updated successfully, but these errors were encountered:
Currently, when shipperctl is trying to set up the application cluster, it uses the service account that was created when "joining" the two clusters together.
However, this adds an unnecessary step right now, since the service account that we create doesn't have the permission to create CRDs, ClusterRoleBindings, and so on. It's also not safe to give the service account these permissions.
However, the user who is running
shipperctl
has these permissions, so we should use those permissions and do everything through the current user's context, who has to be an administrator anyway.The text was updated successfully, but these errors were encountered: