Skip to content

Commit

Permalink
remove over privileged rbac from cnao manifest (#413)
Browse files Browse the repository at this point in the history
Currently the cnao rbac Policy has a segment that elevates the container privileges to all resources, and all verbs.
This is too much for the cnao's needs, and also in turn changes scc to anyuid in cnv/okd clusters.
Hence, the rbac segment is removed in this commit.

Signed-off-by: Ram Lavi <ralavi@redhat.com>
  • Loading branch information
RamLavi committed Jun 2, 2020
1 parent 4205fa0 commit 1ce8c55
Showing 1 changed file with 0 additions and 11 deletions.
11 changes: 0 additions & 11 deletions pkg/components/components.go
Expand Up @@ -308,17 +308,6 @@ func GetClusterRole() *rbacv1.ClusterRole {
"watch",
},
},
{
APIGroups: []string{
"*",
},
Resources: []string{
"*",
},
Verbs: []string{
"*",
},
},
},
}
return role
Expand Down

0 comments on commit 1ce8c55

Please sign in to comment.