• Proposed title of this feature request

Capability for a user to restrict rsh/exec access to the pods of a specific deployment of the namespace.

2. What is the nature and description of the request?

A particular user can restrict rsh/exec access to all the pods by attaching a role not having rsh/exec permissions but if he wants to restrict rsh access to specific deployment then it is not possible. So want a capability so that a single user can have permissions related to specific pods or deployments as well.

3. Why does the customer need this? (List the business requirements here)

The Cu had requirements from their security team to remove rsh/exec permissions for a user for a specific deployment( as the users can see sensitive data inside the pod )

4. List any affected packages or components.

pods