# Elastic operator all-in-one can read all secrets in all namespaces

**URL:** <https://discuss.elastic.co/t/elastic-operator-all-in-one-can-read-all-secrets-in-all-namespaces/226218>\
**Category:** Elastic Cloud on Kubernetes (ECK)\
**Created:** [April 2, 2020, 1:12pm UTC](https://discuss.elastic.co/t/elastic-operator-all-in-one-can-read-all-secrets-in-all-namespaces/226218 "2020-04-02T13:12:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![data\_smith](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/data_smith/32/124122_2.png) [@data\_smith](https://discuss.elastic.co/u/data_smith)\
**Post date:** [April 2, 2020, 1:12pm UTC](https://discuss.elastic.co/t/elastic-operator-all-in-one-can-read-all-secrets-in-all-namespaces/226218/1 "2020-04-02T13:12:49Z")

</div>

The Elastic operator all-in-one install can read all secrets in all namespaces. Are there plans to make it more secure?

---

<div class="post-metadata">

**Author:** ![Thibault\_Richard](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thibault_richard/32/50513_2.png) [@Thibault\_Richard](https://discuss.elastic.co/u/Thibault_Richard)\
**Post date:** [April 9, 2020, 11:48am UTC](https://discuss.elastic.co/t/elastic-operator-all-in-one-can-read-all-secrets-in-all-namespaces/226218/2 "2020-04-09T11:48:37Z")

</div>

The Elastic Operator can be deployed in 2 different modes.

Either watching all namespaces or a subset of namespaces with restricted RBAC permissions.

Furthermore it is possible to deploy the operator into the same namespace as the workloads it is managing.

You will find examples here: [https://github.com/elastic/cloud-on-k8s/tree/master/config/operator](https://github.com/elastic/cloud-on-k8s/tree/master/config/operator).

We are still working to bring a tool to ease the configuration of the operator:  
[https://github.com/elastic/cloud-on-k8s/issues/2406](https://github.com/elastic/cloud-on-k8s/issues/2406).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 7:51am UTC](https://discuss.elastic.co/t/elastic-operator-all-in-one-can-read-all-secrets-in-all-namespaces/226218/3 "2022-11-04T07:51:56Z")

</div>


