Uploaded image for project: 'OpenShift API for Data Protection'
  1. OpenShift API for Data Protection
  2. OADP-6085

Operator best practices #27: Ensure all the workload's operators have no privileges on cluster resources.

XMLWordPrintable

    • Quality / Stability / Reliability
    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • oadp-operator-bundle-container-1.5.0-103
    • ToDo
    • Very Likely
    • 0
    • None
    • Unset
    • Unknown
    • None

      Description of problem:
      https://docs.google.com/spreadsheets/d/12o_xZw1O7HN4Onagx8ferGVwKjq8VL_B6FBvCKozv7A/edit?gid=474648908#gid=474648908

      row 27

      Ensure all the workload's operators have no privileges on cluster resources.
      Checks whether the operator needs access to Security Context Constraints. Test passes if clusterPermissions is not present in the CSV manifest or is present with no RBAC rules related to SCCs.

              wnstb Wes Hayutin
              rhn-engineering-mpryc Michal Pryc
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: