Document minimal needed permissions
Opened this issue · 0 comments
ddklo commented
Currently the documentation https://learn.microsoft.com/en-us/visualstudio/bridge/overview-bridge-to-kubernetes#kubernetes-rbac-authorization uses a cluster admin role. In some scenarios with shared klusteres giving this role to users or groups in not desired. A namespaced role seems to work, but which apiGroups, resources and verbs are needed aren't documented. Could the minimal needed permissions be documented?
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: bridgetokubernetes-dev
rules:
- apiGroups: ["","apps","rbac.authorization.k8s.io","batch"]
resources: ["*"]
verbs: ["*"]