Skip to content

Commit fe683fd

Browse files
committed
chore: Remove the events.k8s.io rule from the product ClusterRole
Neither OPA nor UIF interact with the Kubernetes API
1 parent 5aea469 commit fe683fd

1 file changed

Lines changed: 0 additions & 8 deletions

File tree

deploy/helm/opa-operator/templates/roles.yaml

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -121,14 +121,6 @@ metadata:
121121
labels:
122122
{{- include "operator.labels" . | nindent 4 }}
123123
rules:
124-
# OPA workload pods publish Kubernetes events (e.g. from the user-info-fetcher sidecar)
125-
- apiGroups:
126-
- events.k8s.io
127-
resources:
128-
- events
129-
verbs:
130-
- create
131-
- patch
132124
{{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
133125
# Required on OpenShift to allow the OPA pods to run as a non-root user.
134126
- apiGroups:

0 commit comments

Comments
 (0)