Merge pull request #13 from lightspin-tech/remove_ns_from_clusterrole

remove namespace from clusterrole & clusterrolebinding
lightspin-tech · Feb 21, 2023 · 9ac18d5 · 9ac18d5
2 parents 5e779c2 + 04010ae
commit 9ac18d5
Show file tree

Hide file tree

Showing 4 changed files with 2 additions and 4 deletions.
diff --git a/charts/kubecollector/Chart.yaml b/charts/kubecollector/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubecollector
 description: A Helm chart for Lightspin Kuberenetes CSPM
 type: application
-version: 0.1.8
+version: 0.1.9
 appVersion: "2.0.0"
 home: https://lightspin.io/
 maintainers:

diff --git a/charts/kubecollector/README.md b/charts/kubecollector/README.md
@@ -1,6 +1,6 @@
 # Lightspin KubeCollector
 
-![Version: 0.1.8](https://img.shields.io/badge/Version-0.1.8-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.0.0](https://img.shields.io/badge/AppVersion-2.0.0-informational?style=flat-square)
+![Version: 0.1.9](https://img.shields.io/badge/Version-0.1.9-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 2.0.0](https://img.shields.io/badge/AppVersion-2.0.0-informational?style=flat-square)
 
 [Lightspin](https://www.lightspin.io/) is a graph-based technology immediately visualizes, prioritizes, and dynamically remediates critical cloud risks with no custom configuration needed. This repository contains the Helm chart for the Lightspin KubeCollector application to be deployed on customers Kubernetes clusters.
 

diff --git a/charts/kubecollector/templates/rbac/runtime-clusterrole.yaml b/charts/kubecollector/templates/rbac/runtime-clusterrole.yaml
@@ -3,7 +3,6 @@ kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: {{ template "lightspin-kubecollector.runtime.falco.fullname" . }}
-{{ include "lightspin-kubecollector.namespace" . | indent 2 }}
   labels:
     {{- include "lightspin-kubecollector.runtime.falco.labels" . | nindent 4 }}
 rules:

diff --git a/charts/kubecollector/templates/rbac/worker-clusterrole.yaml b/charts/kubecollector/templates/rbac/worker-clusterrole.yaml
@@ -2,7 +2,6 @@ kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: lightspin-secaudit
-{{ include "lightspin-kubecollector.namespace" . | indent 2 }}
 rules:
   - apiGroups: ["*"]
     resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations", "customresourcedefinitions", "apiservices", "controllerrevisions", "daemonsets", "deployments", "replicasets", "statefulsets", "horizontalpodautoscalers", "cronjobs", "jobs", "certificatesigningrequests", "leases", "endpointslices", "events", "flowschemas", "prioritylevelconfigurations", "nodes", "pods", "storagestates", "storageversionmigrations", "ingressclasses", "ingresses", "networkpolicies", "runtimeclasses", "poddisruptionbudgets", "podsecuritypolicies", "clusterrolebindings", "clusterroles", "rolebindings", "roles", "priorityclasses", "volumesnapshotclasses", "volumesnapshotcontents", "volumesnapshots", "csidrivers", "csinodes", "storageclasses", "volumeattachments", "csistoragecapacities", "componentstatuses", "configmaps", "endpoints", "events", "limitranges", "namespaces", "nodes", "persistentvolumeclaims", "persistentvolumes", "pods", "podtemplates", "replicationcontrollers", "resourcequotas", "serviceaccounts", "services"]