Skip to content

fix(operator): in low privilage mode generate rbac for secretwatcher#340

Open
xjerod wants to merge 1 commit intomainfrom
operator-secretwatcher-rbac
Open

fix(operator): in low privilage mode generate rbac for secretwatcher#340
xjerod wants to merge 1 commit intomainfrom
operator-secretwatcher-rbac

Conversation

@xjerod
Copy link
Copy Markdown
Contributor

@xjerod xjerod commented Apr 14, 2026

In order support secret watching, the Union operator requires permission to list pods in the dataplane and the controlplane namespaces to find Union services that are running. This change updates the new RBAC controls introduced with Low Privilege Mode to give the Operator these permissions if Secret Watching is also enabled. If you're using the legacy fallback values, there is no change in behavior.

@aviator-app
Copy link
Copy Markdown
Contributor

aviator-app Bot commented Apr 14, 2026

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This pull request is currently open (not queued).

How to merge

To merge this PR, comment /aviator merge or add the mergequeue label.


See the real-time status of this PR on the Aviator webapp.
Use the Aviator Chrome Extension to see the status of your PR within GitHub.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant