k8s: Remove unused ClusterRole from rbac-admin

The ClusterRole is never used in the rbac-admin setup, rendering this
unnecessary.

Change-Id: I33f2e400249b00c3c1485f6b6827e0fdeff911ca
This commit is contained in:
Michael Kelly 2022-11-30 20:14:09 -08:00
parent ca624113e5
commit f2fcff24fc
No known key found for this signature in database
GPG Key ID: 77F7FE93040ECF3E
1 changed files with 2 additions and 108 deletions

View File

@ -1,115 +1,9 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: zuul-operator
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: zuul-operator
rules:
- apiGroups:
- ""
resources:
- pods
- pods/exec
- services
- services/finalizers
- endpoints
- persistentvolumeclaims
- events
- configmaps
- secrets
- ingresses
- namespaces
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- deployments
- daemonsets
- replicasets
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- policy
resources:
- poddisruptionbudgets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resourceNames:
- zuul-operator
resources:
- deployments/finalizers
verbs:
- update
- apiGroups:
- apps
resources:
- replicasets
- deployments
verbs:
- get
- apiGroups:
- operator.zuul-ci.org
- cert-manager.io
- pxc.percona.com
resources:
- '*'
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- get
- create
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
@ -120,5 +14,5 @@ subjects:
namespace: default
roleRef:
kind: ClusterRole
name: cluster-admin #zuul-operator
name: cluster-admin
apiGroup: rbac.authorization.k8s.io