Skip to content

Commit 1926125

Browse files
committed
chore: Remove redundant rules (pods get/list already covered by the "nodes" clusterrole
1 parent 9b8ec13 commit 1926125

1 file changed

Lines changed: 0 additions & 9 deletions

File tree

deploy/helm/hdfs-operator/templates/clusterrole-product.yaml

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -12,23 +12,14 @@ rules:
1212
# - configmaps: HDFS configuration files
1313
# - secrets: TLS certificates and Kerberos keytabs (provided by secret-operator volumes)
1414
# - serviceaccounts: bound service account token projection
15-
# - pods: pod self-inspection (e.g. hostname resolution, ZooKeeper coordination)
1615
- apiGroups:
1716
- ""
1817
resources:
1918
- configmaps
2019
- secrets
2120
- serviceaccounts
22-
- pods
2321
verbs:
2422
- get
25-
# List pods for topology detection and peer discovery.
26-
- apiGroups:
27-
- ""
28-
resources:
29-
- pods
30-
verbs:
31-
- list
3223
{{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
3324
# Required on OpenShift to allow HDFS pods to run as a non-root user.
3425
- apiGroups:

0 commit comments

Comments
 (0)