fabric8-rbac rolebinding is over-permissive

[switchboardOp]

Cluster-admin, really?
I admit I haven't done a deep dive on the code, but surely something that gets, lists and watches cluster state doesn't need permission to edit and delete everything in the cluster!

[msschl]

I agree. This should be addressed soon...

[geerlingguy]

Related: #11

And I mentioned this as an example of a major security risk (for the reason @switchboardOp mentioned, as well as the fact that this also grants all pods in the default namespace cluster-admin, which means any pod running in the same namespace could manage any resource (including other namespaces) in the cluster...) in a recent blog post.

[ThomasManier]

Over a year and no progress?