From 55ad2d7eab0f24fa68d80eaf3101257ad1e18392 Mon Sep 17 00:00:00 2001 From: Jens L Date: Fri, 14 Apr 2023 13:21:05 +0200 Subject: [PATCH] website/docs: add helm RBAC notice (#5255) website/docs: add helm notice Signed-off-by: Jens Langhammer --- website/docs/releases/2023/v2023.4.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/website/docs/releases/2023/v2023.4.md b/website/docs/releases/2023/v2023.4.md index 641e4cec9..5194be543 100644 --- a/website/docs/releases/2023/v2023.4.md +++ b/website/docs/releases/2023/v2023.4.md @@ -3,6 +3,14 @@ title: Release 2023.4 - RADIUS support slug: "/releases/2023.4" --- +## Breaking changes + +- (Kubernetes only) Changes to RBAC objects created by helm + + In previous versions, the helm chart would create a _ClusterRole_ and _ClusterRoleBinding_ if the service account creation was enabled. This was done to allow the deployment of outposts in any namespace in kubernetes. As this conflicted with multiple authentik installs per cluster, and was often not used, the new helm chart changes these resources to a _Role_ and _RoleBinding_, which give authentik access to deploy in the same namespace. + + To keep the old behaviour, you can install the [authentik-remote-cluster](https://artifacthub.io/packages/helm/goauthentik/authentik-remote-cluster) chart, which deploys the same RBAC into any other namespace or cluster. + ## New features - RADIUS support