-
Feature
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
False
-
-
False
-
Not Selected
-
0
-
0% To Do, 0% In Progress, 100% Done
Proposed title of this feature request
As of now the Cluster Observability Operator is creating a ClusterRoleBinding for the ServiceAccounts for Prometheus and Alertmanager, which gives the ServiceAccount the possibility to get,list,watch on services, endpoints, pods and ingresses for the whole cluster. As a service provider it's giving the end user the possibility to get all data for the given resources from the whole cluster what should be prevented in a multi-tenant environment. There should be a way to make it optional that the ClusterRoleBinding is getting created.
What is the nature and description of the request?
Increase security and protect customer data getting accessed from other customers.
Why does the customer need this? (List the business requirements)
Increasing security and data protection
List any affected packages or components.
Cluster Observability Operator 1.2