-
Story
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
None
-
False
-
-
False
-
5
-
None
-
None
-
WINC - Sprint 274, WINC - Sprint 275, WINC - Sprint 276, WINC - Sprint 277, WINC - Sprint 278
Description
WICD only needs write access to one Node object, decreasing the RBAC breadth will help harden security.
Engineering Details
This was done in hybrid-overlay, related PR: https://github.com/openshift/ovn-kubernetes/pull/1919
Acceptance Criteria
- WICD is only given permissions to write to its own Node object