panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove dead role code

Browse Source 
The cluster role does the same thing, but at the cluster level
where it belongs. The extra role code does nothing so we remove
it here.

Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
Kevin Fox
2023-03-08 12:36:35 -08:00
committed by kfox1111
parent d2eba226d4
commit aaaf2f7625
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/templates/roles.yaml
-4
View File
@@ -6,10 +6,6 @@ metadata:
name: {{ include "spire-server.fullname" . }} name: {{ include "spire-server.fullname" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
rules: rules:
# allow "get" access to pods (to resolve selectors for PSAT attestation)
- apiGroups: [""]
resources: [pods]
verbs: [get]
# allow access to "get" and "patch" the spire-bundle ConfigMap (for SPIRE # allow access to "get" and "patch" the spire-bundle ConfigMap (for SPIRE
# agent bootstrapping, see the spire-bundle ConfigMap below) # agent bootstrapping, see the spire-bundle ConfigMap below)
- apiGroups: [""] - apiGroups: [""]