Skip to content

Commit 91ad228

Browse files
author
Souvik Sarkar
committed
incorporated missed comment
1 parent 7307e0f commit 91ad228

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/op-disabling-automatic-creation-of-rbac-resources.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
= Disabling the automatic creation of RBAC resources
77

88
[role="_abstract"]
9-
The default installation of the {pipelines-title} Operator creates multiple Role Based Access Control (RBAC) resources for all namespaces in the cluster, except the namespaces matching the `^(openshift|kube)-*` regular expression pattern. Among these RBAC resources, the `pipelines-scc-rolebinding` SCC role binding resource is a potential security issue, because the associated `pipelines-scc` Security Context Constraint has `RunAsAny` privilege.
9+
The default installation of the {pipelines-title} Operator creates multiple role-based access control (RBAC) resources for all namespaces in the cluster, except the namespaces matching the `^(openshift|kube)-*` regular expression pattern. Among these RBAC resources, the `pipelines-scc-rolebinding` security context constraint (SCC) role binding resource is a potential security issue, because the associated `pipelines-scc` SCC has the `RunAsAny` privilege.
1010

1111
To disable the automatic creation of cluster-wide RBAC resources after the {pipelines-title} Operator is installed, cluster administrators can set the `createRbacResource` parameter to `false` in the cluster-level `TektonConfig` custom resource (CR).
1212

0 commit comments

Comments
 (0)