fix: remove unused permissions (tokenreviews, subjectaccessreviews)

grafana · Jan 31, 2024 · a138ad7 · a138ad7
1 parent dd8afac
commit a138ad7
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 36 deletions.
diff --git a/deploy/helm/grafana-operator/templates/rbac.yaml b/deploy/helm/grafana-operator/templates/rbac.yaml
@@ -222,18 +222,6 @@ rules:
       - update
       - watch
   {{- end }}
-  - apiGroups:
-      - authentication.k8s.io
-    resources:
-      - tokenreviews
-    verbs:
-      - create
-  - apiGroups:
-      - authorization.k8s.io
-    resources:
-      - subjectaccessreviews
-    verbs:
-      - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: {{ if not $namespaceScoped }}Cluster{{ end }}RoleBinding

diff --git a/deploy/kustomize/overlays/cluster_scoped/rbac.yaml b/deploy/kustomize/overlays/cluster_scoped/rbac.yaml
@@ -201,18 +201,6 @@ rules:
       - list
       - update
       - watch
-  - apiGroups:
-      - authentication.k8s.io
-    resources:
-      - tokenreviews
-    verbs:
-      - create
-  - apiGroups:
-      - authorization.k8s.io
-    resources:
-      - subjectaccessreviews
-    verbs:
-      - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/deploy/kustomize/overlays/namespace_scoped/rbac.yaml b/deploy/kustomize/overlays/namespace_scoped/rbac.yaml
@@ -202,18 +202,6 @@ rules:
       - list
       - update
       - watch
-  - apiGroups:
-      - authentication.k8s.io
-    resources:
-      - tokenreviews
-    verbs:
-      - create
-  - apiGroups:
-      - authorization.k8s.io
-    resources:
-      - subjectaccessreviews
-    verbs:
-      - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding