Skip to content

Use Kubernetes RBAC for pods

The following discussion from !1 (merged) should be addressed:

  • @alossent started a discussion: (+1 comment)

    We could even consider all users/groups with permissions to get pod logs in the project, e.g. from the output of oc adm policy who-can get pods --subresource log -o yaml (I think we've seen the request on MM to take project RBAC into account if possible)