Loading...

XML

Word

Printable

Type: Bug
Resolution: Not a Bug
Priority: Normal
Fix Version/s: None
Affects Version/s: 4.14.0
Component/s: Storage / Operators
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
Low
Regression:
No
Epic Link:
CSI operator for Secrets Store (TechPreview)

Target Backport Versions:
None
Target Version:

4.14.0
Release Blocker:
None
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:

This came up during enhancement review:
https://github.com/openshift/enhancements/pull/1423/files#r1233880248
Ideally the secrets store CSI driver operator should create user RBAC roles so that regular users/admins can create/modify/delete SecretProviderClasses in their NS and read SecretProviderClassPodStatuses.
Similar to VolumeSnapshots here: https://github.com/openshift/cluster-csi-snapshot-controller-operator/blob/master/manifests/05_user_rbac.yaml

Update the secrets store enhancement when this bug is fixed.

Version-Release number of selected component (if applicable):

4.14.0

How reproducible:

Steps to Reproduce:

1.
2.
3.

Actual results:

Expected results:

Additional info:

Assignee:: Jonathan Dobson

Reporter:: Jonathan Dobson

Need Info From:: None

Contributors:: None

QA Contact:: Rohit Patil

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2023/07/17 4:43 PM

Updated:: 2025/07/26 5:30 AM

Resolved:: 2023/08/07 11:15 PM

Details

Description

Attachments

Easy Agile Planning Poker

Activity

People

Dates

Hide