Skip to content
This repository has been archived by the owner on May 3, 2022. It is now read-only.

Change shipperctl to use the user's context instead of the Shipper service account #319

Open
parhamdoustdar opened this issue May 14, 2020 · 0 comments
Milestone

Comments

@parhamdoustdar
Copy link
Contributor

Currently, when shipperctl is trying to set up the application cluster, it uses the service account that was created when "joining" the two clusters together.

However, this adds an unnecessary step right now, since the service account that we create doesn't have the permission to create CRDs, ClusterRoleBindings, and so on. It's also not safe to give the service account these permissions.

However, the user who is running shipperctl has these permissions, so we should use those permissions and do everything through the current user's context, who has to be an administrator anyway.

@hihilla hihilla added this to the release-0.9 milestone May 20, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants