Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inaccurate statement in the docs for server ClusterRole and ClusterRoleBinding #310

Open
angabini opened this issue Apr 19, 2024 · 0 comments

Comments

@angabini
Copy link

The doc states that:

To allow the server to read and write to this configmap, a ClusterRole must be created that confers the appropriate entitlements to Kubernetes RBAC, and that ClusterRoleBinding must be associated with the service account created in the previous step.

Though, the rule in ClusterRole definitions is:

- apiGroups: ["authentication.k8s.io"]
  resources: ["tokenreviews"]
  verbs: ["create"]

Which seems to have nothing to do with configmaps.

I believe the statement applies to Role/RoleBinding. So, the doc should be updated and possibly needs and addition for why ClusterRole /ClusterRoleBinding are needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant