https://rancher.com/ logo
Title
e

eager-refrigerator-66976

07/28/2022, 12:46 PM
hey guys, is there a way how can I disable crb
global-unrestricted-psp-rolebinding
provisioned by default
apiVersion: <http://rbac.authorization.k8s.io/v1|rbac.authorization.k8s.io/v1>
kind: ClusterRoleBinding
metadata:
  creationTimestamp: "2022-07-20T11:45:40Z"
  name: global-unrestricted-psp-rolebinding
  resourceVersion: "229"
  uid: 8dca97e8-3cf9-4eeb-a8c8-2b84efb70e55
roleRef:
  apiGroup: <http://rbac.authorization.k8s.io|rbac.authorization.k8s.io>
  kind: ClusterRole
  name: global-unrestricted-psp-clusterrole
subjects:
- apiGroup: <http://rbac.authorization.k8s.io|rbac.authorization.k8s.io>
  kind: Group
  name: system:authenticated
that gives unrestricted access to anything authenticated…
ok, enabling CIS removes it