Argo: Open source Kubernetes native workflows, events, CI and CD

Re:Argo: Open source Kubernetes native workflows, events, CI... by nrmitchi on Saturday November 10, 2018 @04:37PM (#18423647)

While I agree with your position that admin rights should not be the default, that doesn't seem to be what Argo is actually doing.

The text snippet you've included is from the quick start/demo page, which seems to be targeted at getting the examples running quickly so that a potential user can see what it is capable of. Other issues for this in a production setup would be the use of the 'default' role/namespace at all. In this use case (running the examples in a new cluster), giving the default user full access is the quickest way to this result.

Clearly it would be better if Argo included a more precise (permission wise) role by default, but from my understanding Argo does not require cluster admin permissions in order to function.

[ Parent | on HN ]

Re:Argo: Open source Kubernetes native workflows, events, CI... by TheDong on Saturday November 10, 2018 @05:11PM (#18423802)

The parent post did quality it appropriately with "if the docs are even close to representative of the actual application".

I hope the docs are not representative, but the parent post is right that it's a bad sign. At least put up a warning sign that it's insecure and only suitable for demo purposes to do that.

[ Parent | on HN ]

Re:Argo: Open source Kubernetes native workflows, events, CI... by jessesuen on Sunday November 11, 2018 @12:49AM (#18425175)

Thanks. We've updated the docs to outline the bare minimum set of privileges.

[ Parent | on HN ]