Remove unnecessary RBAC

Signed-off-by: Simon Beck <simon.beck@vshn.ch>
eunames · May 15, 2024 · c8e9202 · c8e9202
1 parent d21f019
commit c8e9202
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 28 deletions.
diff --git a/api/v1/podconfig_types.go b/api/v1/podconfig_types.go
@@ -9,8 +9,7 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/client"
 )
 
-// +kubebuilder:rbac:groups=k8up.io,resources=podconfigs,verbs=get;list;watch;create;update;patch;delete
-// +kubebuilder:rbac:groups=k8up.io,resources=podconfigs/status;snapshots/finalizers,verbs=get;update;patch
+// +kubebuilder:rbac:groups=k8up.io,resources=podconfigs,verbs=get;list;watch
 
 // PodConfigSpec contains the podTemplate definition.
 type PodConfigSpec struct {

diff --git a/charts/k8up/templates/operator-clusterrole.yaml b/charts/k8up/templates/operator-clusterrole.yaml
@@ -167,22 +167,9 @@ rules:
     resources:
       - podconfigs
     verbs:
-      - create
-      - delete
       - get
       - list
-      - patch
-      - update
       - watch
-  - apiGroups:
-      - k8up.io
-    resources:
-      - podconfigs/status
-      - snapshots/finalizers
-    verbs:
-      - get
-      - patch
-      - update
   - apiGroups:
       - k8up.io
     resources:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -164,22 +164,9 @@ rules:
   resources:
   - podconfigs
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
-- apiGroups:
-  - k8up.io
-  resources:
-  - podconfigs/status
-  - snapshots/finalizers
-  verbs:
-  - get
-  - patch
-  - update
 - apiGroups:
   - k8up.io
   resources: