Skip to content

Commit 3ff403a

Browse files
committed
Clarify role vs. binding recommendations in notes
Signed-off-by: Brett Tofel <[email protected]>
1 parent 8e1a3e1 commit 3ff403a

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

docs/concepts/how-to-grant-api-access.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -178,6 +178,4 @@ You can create similar ClusterRoles for `edit` and `admin` with appropriate verb
178178
## Notes
179179

180180
- OLM does not handle RBAC for users interacting with CRDs, so it's up to cluster administrators to configure these settings.
181-
- It is not recommended for operator bundles to include RBAC policies granting access to the operator's APIs because cluster administrators should maintain control over the permissions in their clusters.
182-
183-
---
181+
- It is not recommended for operator bundles to include RBAC policies granting access via bindings or role aggregation to the operator's APIs because cluster administrators should maintain control over the permissions in their clusters. Operator packages can certainly add Roles that facilitate the functioning of the operator.

0 commit comments

Comments
 (0)