Fix profiler discovery permissions for the observability project #67

Merged
binjovi-bot merged 1 commit from codex/profiler-discovery-rbac-20260909 into trunk 2026-09-09 09:53:12 +00:00
Owner

Argo CD refused Roles in the three application namespaces, so the profiler could not start. Use one pod-read-only ClusterRole and bind the dedicated profiler account. Keep discovery filtered to the three canary namespaces.

Validation: Kubernetes server dry-run; all Olly checks. No Secret access is granted.

Argo CD refused Roles in the three application namespaces, so the profiler could not start. Use one pod-read-only ClusterRole and bind the dedicated profiler account. Keep discovery filtered to the three canary namespaces. Validation: Kubernetes server dry-run; all Olly checks. No Secret access is granted.
fix(profiles): keep discovery RBAC within the observability project
All checks were successful
binjovi/ci Binjovi completed the frozen plan
9dbb91e715
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/olly!67
No description provided.