-
Spike
-
Resolution: Done
-
Major
-
None
-
None
Determine which escalated privileges for OVN services are not necessary and can be avoided with relative ease, then remove them.
This task may determine additional non-obvious cases of privilege escalation that are worth being tackled but require a non-trivial amount of work. In this case, additional issues should be reported to track these deficiencies.
- is blocked by
-
OSPRH-663 Switch OVNController:ovsdb-server database to PVC
- New
- is related to
-
OSPRH-1932 Split ovn-controller into a separate pod from vswitchd/ovsdb-server
- Closed
- relates to
-
OSPRH-3019 Run OVNController pod components at minimum privilege escalation level
- Refinement
- links to