Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make least-privilege exemptions for ztunnel and install-cni pods #1027

Open
Tracked by #681
mjnagel opened this issue Nov 20, 2024 · 0 comments
Open
Tracked by #681

Make least-privilege exemptions for ztunnel and install-cni pods #1027

mjnagel opened this issue Nov 20, 2024 · 0 comments

Comments

@mjnagel
Copy link
Contributor

mjnagel commented Nov 20, 2024

#699 currently has catch-all exemptions for the ztunnel and istio-cni pods. These exemptions should be slimmed down to just what is necessary for running these applications. All exemptions should have adequate descriptions to provide the "why".
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mjnagel