Closed Bug 1459073 Opened 8 years ago Closed 8 years ago

Ensure that all services run with a service-specific service account

Categories

(Taskcluster :: Services, enhancement)

Product:
Taskcluster
Component:
Services
Type:
enhancement
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: bstack, Assigned: bstack)

References

Details

If we aren't careful, all services run under a default service account and all services can access all secrets in the namespace. On a RBAC cluster, we can use [0] to ensure that only correct services can access correct secrets. [0] https://kubernetes.io/docs/admin/service-accounts-admin/
See Also: → 1459254
Status: NEW → ASSIGNED
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Component: Redeployability → Services
You need to log in before you can comment on or make changes to this bug.