Skip to content

Commit 7307e0f

Browse files
author
Souvik Sarkar
committed
Incorporated peer review comments
1 parent c00ab99 commit 7307e0f

File tree

2 files changed

+6
-3
lines changed

2 files changed

+6
-3
lines changed

cicd/pipelines/installing-pipelines.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ include::_attributes/common-attributes.adoc[]
66

77
toc::[]
88

9+
[role="_abstract"]
910
This guide walks cluster administrators through the process of installing the {pipelines-title} Operator to an {product-title} cluster.
1011

1112
// Prerequisites for installing OpenShift Operator

modules/op-disabling-automatic-creation-of-rbac-resources.adoc

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,16 @@
11
// Module included in the following assemblies:
22
//
33
// */openshift_pipelines/installing-pipelines.adoc
4+
:_content-type: CONCEPT
45
[id="op-disabling-automatic-creation-of-rbac-resources_{context}"]
56
= Disabling the automatic creation of RBAC resources
67

8+
[role="_abstract"]
79
The default installation of the {pipelines-title} Operator creates multiple Role Based Access Control (RBAC) resources for all namespaces in the cluster, except the namespaces matching the `^(openshift|kube)-*` regular expression pattern. Among these RBAC resources, the `pipelines-scc-rolebinding` SCC role binding resource is a potential security issue, because the associated `pipelines-scc` Security Context Constraint has `RunAsAny` privilege.
810

9-
To disable the automatic creation of cluster-wide RBAC resources after the {pipelines-title} Operator is installed, cluster administrators can set the `createRbacResource` parameter to `false` in the cluster level `TektonConfig` custom resource.
11+
To disable the automatic creation of cluster-wide RBAC resources after the {pipelines-title} Operator is installed, cluster administrators can set the `createRbacResource` parameter to `false` in the cluster-level `TektonConfig` custom resource (CR).
1012

11-
.Example `TektonConfig` custom resource
13+
.Example `TektonConfig` CR
1214
[source,yaml]
1315
----
1416
apiVersion: operator.tekton.dev/v1alpha1
@@ -32,6 +34,6 @@ spec:
3234

3335
[WARNING]
3436
====
35-
When you disable automatic creation of the RBAC resources on all namespaces, the default `ClusterTask` resource does not work. For the `ClusterTask` resource to function, cluster administrators or users with appropriate privileges must create the RBAC resources manually for each intended namespace.
37+
As a cluster administrator or an user with appropriate privileges, when you disable the automatic creation of RBAC resources for all namespaces, the default `ClusterTask` resource does not work. For the `ClusterTask` resource to function, you must create the RBAC resources manually for each intended namespace.
3638
====
3739

0 commit comments

Comments
 (0)