Merge pull request #156 from qinqon/kustomize-isolated-remove-nodes-rbac

kustomize, isolated: Remove nodes RBAC
kubevirt · Sep 19, 2022 · 0123ddc · 0123ddc
2 parents 3dfa1f3 + 3bf72f2
commit 0123ddc
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/config/isolated/kustomization.yaml b/config/isolated/kustomization.yaml
@@ -8,6 +8,13 @@ patches:
       value: --authentication-skip-lookup=true
   target:
     kind: Deployment
+- patch: |-
+    - op: remove
+      path: /rules/4
+  target:
+    kind: Role
+    name: kccm
+    namespace: default
 
 patchesStrategicMerge:
 - |-

diff --git a/config/rbac/kccm_role.yaml b/config/rbac/kccm_role.yaml
@@ -26,7 +26,9 @@ rules:
   resources:
   - pods
   verbs:
-  - "*"
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources: