New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Restrict service account impersonation #179

Closed

stefanprodan opened this issue Nov 20, 2020 · 1 comment · Fixed by #180

Assignees

Labels

Member

stefanprodan commented Nov 20, 2020

Do not allow a Kustomization to reference a service account from a different namespace to prevent privilege escalation.

Ref: fluxcd/flux2#263

stefanprodan added the area/kustomize label

stefanprodan self-assigned this

stefanprodan mentioned this issue

Use ServiceAccountName for impersonation #180

Merged

stefanprodan closed this as completed in #180

danieliziourov-form3 commented Aug 25, 2021

But what if I want that feature? :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment