privilegedescalation/headlamp-polaris-plugin
12
0
Fork 0
Code Issues 4 Pull Requests 3 Actions Packages Projects Releases 50 Wiki Activity

Reference shared infra RBAC (PRI-750) #140

Closed
privilegedescalation-engineer[bot] wants to merge 3 commits from gandalf/reference-shared-infra-rbac-pri-750 into main
pull from: gandalf/reference-shared-infra-rbac-pri-750
merge into: privilegedescalation:main
Conversation 6 Commits 3 Files Changed 20
+159 -421

3 Commits

Author SHA1 Message Date
Chris Farhood daad9126f3 Reference shared infra RBAC in deployment scripts 2026-05-05 18:10:21 +00:00
Chris Farhood 7f2d7bba61 fix: correct RBAC manifest per QA review (PRI-555) 
- Remove rbac.authorization.k8s.io privilege escalation block
- Fix orphaned comment from round 1
- Add EOF newline
- Keep serviceaccounts/token for E2E auth (confirmed needed)
- Namespace already correct (privilegedescalation-dev)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-05 18:10:00 +00:00
Chris Farhood 9d40c7b5fb docs: update Headlamp install namespace references from kube-system to headlamp 
Updates all documentation references to the Headlamp install namespace
from kube-system to headlamp as part of PRI-433.

In-scope files updated:
- README.md, SECURITY.md
- docs/getting-started/installation.md, quick-start.md, prerequisites.md
- docs/deployment/helm.md, kubernetes.md, production.md
- docs/troubleshooting/README.md, common-issues.md, rbac-issues.md
- docs/user-guide/configuration.md, rbac-permissions.md
- docs/TESTING.md, TROUBLESHOOTING.md, DEPLOYMENT.md

Out-of-scope (unchanged):
- Source files referencing upstream workload namespace
- RBAC manifests describing Polaris namespace (polaris ns is unchanged)
- NetworkPolicy namespaceSelector (API server runs in kube-system)
- design-decisions.md and ARCHITECTURE.md (URL hashes refer to cluster namespaces, not Headlamp install ns)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-05-05 18:10:00 +00:00