-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.16
-
Moderate
-
None
-
1
-
Sprint 251, NE Sprint 263, NE Sprint 265, NI&D Sprint 266, NI&D Sprint 267
-
5
-
Rejected
-
False
-
-
PxE suggested actions: Is this a bug or should it be an RFE? If a bug then it needs a priority re-evaluation. If Major then try to solve in the current sprint. 3rd triage. Just moved to POST
According http://static.open-scap.org/ssg-guides/ssg-ocp4-guide-cis.html#xccdf_org.ssgproject.content_rule_rbac_wildcard_use the usage of wildcard in ClusterRole and Roles should be prevented as best as possible. Further, one should refrain from using {{cluster-admin}} permissions to comply with CIS security requirements. It's therefore requested to review the below serviceAccount and their associated Roles as they were found not to be compliant with the above and restrict permissions further to the extend possible. - system:serviceaccount:openshift-ingress-operator:ingress-operator
- is related to
-
OCPBUGS-6718 [ingress-operator] - Minimize wildcard/privilege Usage in Cluster and Local Roles
-
- Closed
-
- links to