Permit cleanup of kernel recovery probe Pods #497

Merged

binjovi-bot merged 2 commits from codex/kernel-probe-cleanup-rbac-20260909 into trunk 2026-09-09 18:00:44 +00:00

Conversation 0 Commits 2 Files changed 3 +8 -2

sean commented 2026-09-09 16:56:21 +00:00

Owner

Copy link

Linux rollout completes its host checks but cannot finish recovery because deleting the temporary probe Pod returns Kubernetes 403. Add delete for Pods only in the existing binjovi-nodes Role. Keep cluster-wide Pod deletion forbidden.

Validation: the updated permission guard fails before the Role change and passes after it. The live failure was traced to DELETE of the owned kernel-probe Pod.

Linux rollout completes its host checks but cannot finish recovery because deleting the temporary probe Pod returns Kubernetes 403. Add delete for Pods only in the existing binjovi-nodes Role. Keep cluster-wide Pod deletion forbidden. Validation: the updated permission guard fails before the Role change and passes after it. The live failure was traced to DELETE of the owned kernel-probe Pod.

sean added 1 commit 2026-09-09 16:56:21 +00:00

fix: permit cleanup of kernel recovery probe pods 5a5ff102c7

sean added 1 commit 2026-09-09 17:50:05 +00:00

docs: explain the scoped kernel probe cleanup grant f6d991ebe8

sean force-pushed codex/kernel-probe-cleanup-rbac-20260909 from f6d991ebe8 to 9f15232c54 2026-09-09 17:56:03 +00:00 Compare

binjovi-bot merged commit 9f15232c54 into trunk 2026-09-09 18:00:44 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/seanfarm!497

No description provided.