the-scott-hand opened a new pull request #3618: URL: https://github.com/apache/incubator-heron/pull/3618
Heron doesnt need "cluster admin" level permissions, and based on helm chart set up also does not need to manage resources across kubernetes namespaces. Therefore we should be using a Role and RoleBinding combo to only allow heron apiserver to perform actions on statefulsets in its own namespace. see https://github.com/apache/incubator-heron/issues/3615#issue-701399133 ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
