Solved

Required Permission in K10

  • 8 November 2021
  • 1 comment
  • 52 views

Userlevel 1
Badge

Hi 

 

What kind of permission is needed to install K10 and for the daily admin operation in K10 ? Is a cluster-admin role in K8S mandatory ? If not, what permissions are required ?

 

Thanks 

Chris

icon

Best answer by patricio.rcm 8 November 2021, 10:58

View original

1 comment

Userlevel 6
Badge +3

Hi,

For daily admin operation in K10 you can use K10-admin role or you can use your own clusterrole with K10 permissions.  https://docs.kasten.io/latest/access/rbac.html#default-k10-clusterroles

About K8s, no much information in K10 docs, but as far as I understand, cluster-admin role isn’t actually mandatory for deployment or daily operation.  You could use your own clusterrole with the minimum privileges to deploy K8s resources, and to deal with them (get, list,  create, update, delete): https://kubernetes.io/docs/reference/access-authn-authz/authorization/.  

Basically K10 needs enough permissions to deal with the resources during backup and restore operations, so a too restricted account most likely won’t work.

Comment