From aaaf2f7625082c4013eeb9892b9de0fde1e95b6e Mon Sep 17 00:00:00 2001 From: Kevin Fox Date: Wed, 8 Mar 2023 07:18:13 -0800 Subject: [PATCH] Remove dead role code The cluster role does the same thing, but at the cluster level where it belongs. The extra role code does nothing so we remove it here. Signed-off-by: Kevin Fox --- charts/spire/charts/spire-server/templates/roles.yaml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/charts/spire/charts/spire-server/templates/roles.yaml b/charts/spire/charts/spire-server/templates/roles.yaml index d2da097..d200626 100644 --- a/charts/spire/charts/spire-server/templates/roles.yaml +++ b/charts/spire/charts/spire-server/templates/roles.yaml @@ -6,10 +6,6 @@ metadata: name: {{ include "spire-server.fullname" . }} namespace: {{ .Release.Namespace }} rules: - # allow "get" access to pods (to resolve selectors for PSAT attestation) - - apiGroups: [""] - resources: [pods] - verbs: [get] # allow access to "get" and "patch" the spire-bundle ConfigMap (for SPIRE # agent bootstrapping, see the spire-bundle ConfigMap below) - apiGroups: [""]