Merge pull request #73 from topolvm/remove-node-delete-privilege

Remove an ability to delete nodes
topolvm · Jun 28, 2023 · 39dc2a7 · 39dc2a7
2 parents 4d44cfb + 6e970f3
commit 39dc2a7
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 3 deletions.
diff --git a/charts/pie/templates/role.yaml b/charts/pie/templates/role.yaml
@@ -9,7 +9,6 @@ rules:
   - nodes
   verbs:
   - create
-  - delete
   - get
   - list
   - patch

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -10,7 +10,6 @@ rules:
   - nodes
   verbs:
   - create
-  - delete
   - get
   - list
   - patch

diff --git a/controllers/node_controller.go b/controllers/node_controller.go
@@ -59,7 +59,7 @@ func NewNodeReconciler(
 
 //+kubebuilder:rbac:namespace=default,groups=batch,resources=cronjobs,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:namespace=default,groups=core,resources=pods,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=core,resources=nodes,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=core,resources=nodes,verbs=get;list;watch;create;update;patch
 //+kubebuilder:rbac:groups=core,resources=nodes/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=core,resources=nodes/finalizers,verbs=update