Conversation
|
Skipping CI for Draft Pull Request. |
|
Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits. 📝 Please follow instructions in the contributing guide to update your commits with the DCO Full details of the Developer Certificate of Origin can be found at developercertificate.org. The list of commits missing DCO signoff:
DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
The approver checked that the requestor matches the identity in the certificate.
However, if we take into account the correctness of the csi-driver-spiffe and the privileges required to create a CertificateRequest resource, this approver becomes less valuable.
Additionally, removing the approver greatly simplifies the installation process.
By reducing the steps required to get this CSI driver working, we aim to improve adoption rates of this CSI driver.
TODO: change the CSI driver so that the CRs are requested by the CSI's SA and not the pod's SA to prevent pods from requesting a random CertificateRequest (eg. for another pod).