From da8aede91583545717850a8e89cfd9a4421b75b8 Mon Sep 17 00:00:00 2001 From: Suraj Deshmukh Date: Thu, 16 Aug 2018 14:26:57 +0530 Subject: [PATCH] [RBAC] Remove permission for Deployments Habitat spec `v1beta1` needed to do CRUD on Deployments so it had permissions on the Kubernetes Deployments resource. Now that it's support is removed no more operations of Deployments are done. Hence this commit removes the permission to Deployments. Signed-off-by: Suraj Deshmukh --- examples/rbac/rbac.yml | 1 - helm/habitat-operator/templates/clusterrole.yaml | 1 - test/e2e/v1beta1/resources/operator/cluster-role.yml | 1 - 3 files changed, 3 deletions(-) diff --git a/examples/rbac/rbac.yml b/examples/rbac/rbac.yml index a4a309de..bda481f9 100644 --- a/examples/rbac/rbac.yml +++ b/examples/rbac/rbac.yml @@ -34,7 +34,6 @@ rules: - apiGroups: - apps resources: - - deployments - statefulsets verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] - apiGroups: [""] diff --git a/helm/habitat-operator/templates/clusterrole.yaml b/helm/habitat-operator/templates/clusterrole.yaml index e797c789..bdc178ca 100644 --- a/helm/habitat-operator/templates/clusterrole.yaml +++ b/helm/habitat-operator/templates/clusterrole.yaml @@ -28,7 +28,6 @@ rules: - apiGroups: - apps resources: - - deployments - statefulsets verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] - apiGroups: [""] diff --git a/test/e2e/v1beta1/resources/operator/cluster-role.yml b/test/e2e/v1beta1/resources/operator/cluster-role.yml index 6f9ce030..64346d24 100644 --- a/test/e2e/v1beta1/resources/operator/cluster-role.yml +++ b/test/e2e/v1beta1/resources/operator/cluster-role.yml @@ -16,7 +16,6 @@ rules: - apiGroups: - apps resources: - - deployments - statefulsets verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] - apiGroups: [""]