fix(audit): use tke default service account (#1883)

tkestack · Apr 27, 2022 · 92a7f18 · 92a7f18
1 parent 84fbb97
commit 92a7f18
Showing 1 changed file with 0 additions and 39 deletions.
diff --git a/cmd/tke-installer/app/installer/manifests/tke-audit-api/tke-audit-api.yaml b/cmd/tke-installer/app/installer/manifests/tke-audit-api/tke-audit-api.yaml
@@ -15,44 +15,6 @@ spec:
       port: 443
       targetPort: 9461
 ---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: tke-audit-api
-  namespace: tke
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  labels:
-    kubernetes.io/bootstrapping: rbac-defaults
-  name: tke-audit-api
-  namespace: tke
-rules:
-  - apiGroups: [""]
-    resources:
-      - configmaps
-    resourceNames: ["tke-audit-api"]
-    verbs: ["get", "update"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  annotations:
-    rbac.authorization.kubernetes.io/autoupdate: "true"
-  labels:
-    kubernetes.io/bootstrapping: rbac-defaults
-  name: tke-audit-api
-  namespace: tke
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: tke-audit-api
-subjects:
-  - kind: ServiceAccount
-    name: tke-audit-api
-    namespace: tke
----
 kind: Deployment
 apiVersion: apps/v1
 metadata:
@@ -80,7 +42,6 @@ spec:
             - matchExpressions:
               - key: node-role.kubernetes.io/master
                 operator: Exists
-      serviceAccountName: tke-audit-api
       containers:
         - name: tke-audit-api
           image: {{ .Image }}