Merge pull request #507 from cbgbt/reduce-brupop-perms

Remove unnecessary deployment management permissions from brupop
bottlerocket-os · Aug 9, 2023 · f84705a · f84705a
2 parents 2d37c8d + 6abeced
commit f84705a
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 25 deletions.
diff --git a/deploy/charts/bottlerocket-update-operator/README.md b/deploy/charts/bottlerocket-update-operator/README.md
@@ -36,7 +36,7 @@ To install the bottlerocket-shadow CRD locally, run:
 ```
 helm install \
   brupop-crd \
-  deploy/charts/bottlerocket-shadow \
+  deploy/charts/bottlerocket-shadow
 ```
 
 ### Cert-manager

diff --git a/deploy/charts/bottlerocket-update-operator/templates/api-server-cluster-role.yaml b/deploy/charts/bottlerocket-update-operator/templates/api-server-cluster-role.yaml
@@ -22,18 +22,6 @@ rules:
       - patch
       - update
       - watch
-  - apiGroups:
-      - apps
-    resources:
-      - deployments
-    verbs:
-      - create
-      - delete
-      - deletecollection
-      - get
-      - list
-      - patch
-      - update
   - apiGroups:
       - ""
     resources:

diff --git a/deploy/charts/bottlerocket-update-operator/templates/controller-cluster-role.yaml b/deploy/charts/bottlerocket-update-operator/templates/controller-cluster-role.yaml
@@ -28,18 +28,6 @@ rules:
       - patch
       - update
       - delete
-  - apiGroups:
-      - apps
-    resources:
-      - deployments
-    verbs:
-      - create
-      - delete
-      - deletecollection
-      - get
-      - list
-      - patch
-      - update
   - apiGroups:
       - ""
     resources: