You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Thomas Weise (Jira)" <ji...@apache.org> on 2022/03/01 18:30:00 UTC

[jira] [Commented] (FLINK-26436) SharedIndexInformer should respect watched namespaces

    [ https://issues.apache.org/jira/browse/FLINK-26436?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17499685#comment-17499685 ] 

Thomas Weise commented on FLINK-26436:
--------------------------------------

Thanks for filing. Yes and it would actually be nice if it automatically followed the namespace restriction of the operator/primary resource.

> SharedIndexInformer should respect watched namespaces
> -----------------------------------------------------
>
>                 Key: FLINK-26436
>                 URL: https://issues.apache.org/jira/browse/FLINK-26436
>             Project: Flink
>          Issue Type: Sub-task
>          Components: Kubernetes Operator
>            Reporter: Gyula Fora
>            Assignee: Gyula Fora
>            Priority: Major
>
> At the moment the the SharedIndexInformer for accessing jobmanager deployments watches resources in "anyNamespace" which requires clusterwide resources.
> We should change this so that it only monitors the watched namespaces when defined to allow for proper rbac settings in restriced environments.
> cc [~thw] 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)