Skip to content

Commit d712181

Browse files
authored
Merge pull request #56471 from xenolinux/add-warning-auth
OCPBUGS#5033: Add a warning regarding execution privileges
2 parents effd195 + 80f95fc commit d712181

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

modules/rbac-overview.adoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -144,6 +144,10 @@ local role bindings, users, groups and service accounts are illustrated below.
144144

145145
image::rbac.png[{product-title} RBAC]
146146

147+
[WARNING]
148+
====
149+
The `get pods/exec`, `get pods/*`, and `get *` rules grant execution privileges when they are applied to a role. Apply the principle of least privilege and assign only the minimal RBAC rights required for users and agents. For more information, see link:https://access.redhat.com/solutions/6989997[RBAC rules allow execution privileges].
150+
====
147151

148152
[id="evaluating-authorization_{context}"]
149153
== Evaluating authorization

0 commit comments

Comments
 (0)