Remove unused ref to hostnetwork in cpo role

The control-plane-operator Role has a rule to allow use of the hostnetwork SCC, but the control-plane-operator actually runs under the restricted-v2 SCC. This change removes the unused rule.
openshift · Mar 22, 2024 · 2ace4c6 · 2ace4c6
1 parent fda0faf
commit 2ace4c6
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/hypershift-operator/controllers/hostedcluster/hostedcluster_controller.go b/hypershift-operator/controllers/hostedcluster/hostedcluster_controller.go
@@ -2790,12 +2790,6 @@ func reconcileControlPlaneOperatorRole(role *rbacv1.Role, enableCVOManagementClu
 				"watch",
 			},
 		},
-		{
-			APIGroups:     []string{"security.openshift.io"},
-			ResourceNames: []string{"hostnetwork"},
-			Resources:     []string{"securitycontextconstraints"},
-			Verbs:         []string{"use"},
-		},
 		// This is needed for CPO to grant Autoscaler its RBAC policy.
 		{
 			APIGroups: []string{"cluster.x-k8s.io"},