Skip to content

Commit c00ab99

Browse files
author
Souvik Sarkar
committed
Incorporated SME review comments
1 parent 46acdbf commit c00ab99

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/op-disabling-automatic-creation-of-rbac-resources.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
[id="op-disabling-automatic-creation-of-rbac-resources_{context}"]
55
= Disabling the automatic creation of RBAC resources
66

7-
After default installation, the {pipelines-title} Operator creates multiple Role Based Access Control (RBAC) resources for all namespaces in the cluster. Among them, the `pipelines-scc-rolebinding` SCC role binding resource is a potential security issue, because the associated `pipelines-scc` Security Context Constraint has `RunAsAny` privilege.
7+
The default installation of the {pipelines-title} Operator creates multiple Role Based Access Control (RBAC) resources for all namespaces in the cluster, except the namespaces matching the `^(openshift|kube)-*` regular expression pattern. Among these RBAC resources, the `pipelines-scc-rolebinding` SCC role binding resource is a potential security issue, because the associated `pipelines-scc` Security Context Constraint has `RunAsAny` privilege.
88

99
To disable the automatic creation of cluster-wide RBAC resources after the {pipelines-title} Operator is installed, cluster administrators can set the `createRbacResource` parameter to `false` in the cluster level `TektonConfig` custom resource.
1010

0 commit comments

Comments
 (0)