Merge pull request #1161 from abutcher/azure-network-write

OCPBUGS-17872: Azure MAO CredentialsRequest contains unnecessary network write permissions
openshift · Sep 6, 2023 · 525f8e5 · 525f8e5
2 parents 579bb56 + cf363fe
commit 525f8e5
Showing 1 changed file with 0 additions and 11 deletions.
diff --git a/install/0000_30_machine-api-operator_00_credentials-request.yaml b/install/0000_30_machine-api-operator_00_credentials-request.yaml
@@ -97,38 +97,27 @@ spec:
     - Microsoft.Compute/virtualMachines/read
     - Microsoft.Compute/virtualMachines/write
     - Microsoft.ManagedIdentity/userAssignedIdentities/assign/action
-    - Microsoft.Network/applicationSecurityGroups/delete
     - Microsoft.Network/applicationSecurityGroups/read
-    - Microsoft.Network/applicationSecurityGroups/write
     - Microsoft.Network/loadBalancers/backendAddressPools/join/action
-    - Microsoft.Network/loadBalancers/delete
     - Microsoft.Network/loadBalancers/read
     - Microsoft.Network/loadBalancers/write
     - Microsoft.Network/networkInterfaces/delete
     - Microsoft.Network/networkInterfaces/join/action
     - Microsoft.Network/networkInterfaces/loadBalancers/read
     - Microsoft.Network/networkInterfaces/read
     - Microsoft.Network/networkInterfaces/write
-    - Microsoft.Network/networkSecurityGroups/delete
     - Microsoft.Network/networkSecurityGroups/read
     - Microsoft.Network/networkSecurityGroups/write
     - Microsoft.Network/publicIPAddresses/delete
     - Microsoft.Network/publicIPAddresses/join/action
     - Microsoft.Network/publicIPAddresses/read
     - Microsoft.Network/publicIPAddresses/write
-    - Microsoft.Network/routeTables/delete
     - Microsoft.Network/routeTables/read
-    - Microsoft.Network/routeTables/write
     - Microsoft.Network/virtualNetworks/delete
     - Microsoft.Network/virtualNetworks/read
-    - Microsoft.Network/virtualNetworks/subnets/delete
     - Microsoft.Network/virtualNetworks/subnets/join/action
     - Microsoft.Network/virtualNetworks/subnets/read
-    - Microsoft.Network/virtualNetworks/subnets/write
-    - Microsoft.Network/virtualNetworks/write
-    - Microsoft.Resources/subscriptions/resourceGroups/delete
     - Microsoft.Resources/subscriptions/resourceGroups/read
-    - Microsoft.Resources/subscriptions/resourceGroups/write
 ---
 apiVersion: cloudcredential.openshift.io/v1
 kind: CredentialsRequest