Skip to content

Commit b0cba3e

Browse files
authored
fix(helm): remove unused capture RBAC from hubble operator clusterrole (#2420)
# Description The Capture CRD is not shipped with this chart, `retina.sh/captures` permissions are unused and constitute excess privilege. The same goes for the `batch/jobs` since they are used for that reason. ## Related Issue If this pull request is related to any issue, please mention it here. Additionally, make sure that the issue is assigned to you before submitting this pull request. ## Checklist - [x] I have read the [contributing documentation](https://retina.sh/docs/Contributing/overview). - [x] I signed and signed-off the commits (`git commit -S -s ...`). See [this documentation](https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification) on signing commits. - [x] I have correctly attributed the author(s) of the code. - [x] I have tested the changes locally. - [ ] I have followed the project's style guidelines. - [ ] I have updated the documentation, if necessary. - [ ] I have added tests, if applicable. ## Screenshots (if applicable) or Testing Completed Please add any relevant screenshots or GIFs to showcase the changes made. ## Additional Notes Add any additional notes or context about the pull request here. --- Please refer to the [CONTRIBUTING.md](../CONTRIBUTING.md) file for more information on how to contribute to this project.
1 parent a1c4992 commit b0cba3e

1 file changed

Lines changed: 0 additions & 45 deletions

File tree

  • deploy/hubble/manifests/controller/helm/retina/templates/operator

deploy/hubble/manifests/controller/helm/retina/templates/operator/clusterrole.yaml

Lines changed: 0 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -32,51 +32,6 @@ rules:
3232
- get
3333
- list
3434
- watch
35-
- apiGroups:
36-
- batch
37-
resources:
38-
- jobs
39-
verbs:
40-
- create
41-
- delete
42-
- deletecollection
43-
- get
44-
- list
45-
- patch
46-
- update
47-
- watch
48-
- apiGroups:
49-
- batch
50-
resources:
51-
- jobs/status
52-
verbs:
53-
- get
54-
- apiGroups:
55-
- retina.sh
56-
resources:
57-
- captures
58-
verbs:
59-
- create
60-
- delete
61-
- get
62-
- list
63-
- patch
64-
- update
65-
- watch
66-
- apiGroups:
67-
- retina.sh
68-
resources:
69-
- captures/finalizers
70-
verbs:
71-
- update
72-
- apiGroups:
73-
- retina.sh
74-
resources:
75-
- captures/status
76-
verbs:
77-
- get
78-
- patch
79-
- update
8035
- apiGroups:
8136
- cilium.io
8237
resources:

0 commit comments

Comments
 (0)