Skip to content

[OSPRH-22222] Apply least privilege to RBAC permissions#39

Merged
openshift-merge-bot[bot] merged 1 commit into
openstack-lightspeed:mainfrom
lpiwowar:lpiwowar/OSPRH-22222
Nov 24, 2025
Merged

[OSPRH-22222] Apply least privilege to RBAC permissions#39
openshift-merge-bot[bot] merged 1 commit into
openstack-lightspeed:mainfrom
lpiwowar:lpiwowar/OSPRH-22222

Conversation

@lpiwowar

Copy link
Copy Markdown
Contributor

Reduce RBAC permissions to only those actually used by the operator code, following the principle of least privilege.

Closes: #31

@openshift-ci

openshift-ci Bot commented Nov 19, 2025

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lpiwowar

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@lpiwowar

Copy link
Copy Markdown
Contributor Author

/hold

@lpiwowar

Copy link
Copy Markdown
Contributor Author

/unhold

Reduce RBAC permissions to only those actually used by the operator
code, following the principle of least privilege.
@lpiwowar lpiwowar force-pushed the lpiwowar/OSPRH-22222 branch from 68204a3 to 9caf5c6 Compare November 21, 2025 14:18
@lpiwowar lpiwowar marked this pull request as ready for review November 21, 2025 14:27
@openshift-ci openshift-ci Bot requested review from Akrog and umago November 21, 2025 14:27
@umago

umago commented Nov 24, 2025

Copy link
Copy Markdown
Contributor

/lgtm

Thanks Lukas for working on this!

@openshift-ci openshift-ci Bot added the lgtm label Nov 24, 2025
@openshift-merge-bot openshift-merge-bot Bot merged commit 9bb8439 into openstack-lightspeed:main Nov 24, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Go through ALL permissions of the operator and ensure ClusterRole is used only when necessary

2 participants