Bug: Unnecessary permissions

[Yseona]

Hi community!

I just found that the Deployment k8gb in the charts has delete verb for the ingresses resource (role.yaml). However, after reading the source code of k8gb, I didn't find any Kubernetes API usages that require delete ingresses permissions. Therefore, for security reasons, I suggest checking this permission to determine if it is truly unnecessary. If it is, the issue should be fixed by removing the unnecessary permission or other feasible methods.

[ytsarev]

Hi, thanks for the report! I think that's a good catch, as we are only creating and updating ingresses as of now. PR is highly welcomed :)

[abaguas]

I believe the delete permission is required. A GSLB resource creates an ingress resource from the embedded spec. When that GSLB is deleted it deletes the ingress it created. The deletion is done through a finalizer since the GSLB resource owns the Ingress, that is why the source code doesn't include an explicit deletion.

[ytsarev]

@abaguas that's actually good point for the case of full embedded Ingress ownership, we need deletion. Closing