-
Epic
-
Resolution: Unresolved
-
Major
-
None
-
None
-
R&D Run buildah with default service account
-
False
-
False
-
To Do
-
SECFLOWOTL-55 - Enhance outerloop security
-
Undefined
Goal
As a cluster-admin, I want to build images using buildah and s2i in pipelines using the default service account so that app teams can build images without requiring additional privileges in their namespaces.
Acceptance Criteria
- Buildah and S2I Tasks can run in a pipeline using the default service account that exists in the namespace
- Buildah and S2I Tasks continue to work when the pipeline service account and rbac handling in the operator is disabled
- relates to
-
SRVKP-1514 Reduced build privileges
- Closed