From 5c78b9b69d765ecdcef1a623ae5dd46af55311a7 Mon Sep 17 00:00:00 2001 From: kirillovap Date: Mon, 27 Mar 2023 15:05:14 +0300 Subject: [PATCH] Remove excess permissions of csi-s3 account --- deploy/helm/templates/csi-s3.yaml | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/deploy/helm/templates/csi-s3.yaml b/deploy/helm/templates/csi-s3.yaml index 9cf046f..2f63c3d 100644 --- a/deploy/helm/templates/csi-s3.yaml +++ b/deploy/helm/templates/csi-s3.yaml @@ -8,22 +8,6 @@ kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: csi-s3 -rules: - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get", "list"] - - apiGroups: [""] - resources: ["nodes"] - verbs: ["get", "list", "update"] - - apiGroups: [""] - resources: ["namespaces"] - verbs: ["get", "list"] - - apiGroups: [""] - resources: ["persistentvolumes"] - verbs: ["get", "list", "watch", "update"] - - apiGroups: ["storage.k8s.io"] - resources: ["volumeattachments"] - verbs: ["get", "list", "watch", "update"] --- kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1