fix(kiali-server): don't create unused ClusterRole (#261)

Signed-off-by: Arthur Le Roux <aleroux@wiremind.io>
kiali · May 16, 2024 · ff22e32 · ff22e32
1 parent cb4aebc
commit ff22e32
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/kiali-server/templates/role-viewer.yaml b/kiali-server/templates/role-viewer.yaml
@@ -1,3 +1,4 @@
+{{- if or (.Values.deployment.view_only_mode) (ne .Values.auth.strategy "anonymous") -}}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -92,3 +93,4 @@ rules:
   verbs:
   - get
 ...
+{{- end -}}
diff --git a/kiali-server/templates/role.yaml b/kiali-server/templates/role.yaml
@@ -1,3 +1,4 @@
+{{- if not (or (.Values.deployment.view_only_mode) (ne .Values.auth.strategy "anonymous")) -}}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -59,7 +60,7 @@ rules:
   - security.istio.io
   - extensions.istio.io
   - telemetry.istio.io
-  - gateway.networking.k8s.io 
+  - gateway.networking.k8s.io
   resources: ["*"]
   verbs:
   - get
@@ -99,3 +100,4 @@ rules:
   verbs:
   - get
 ...
+{{- end -}}