chore: Describe RBAC rules, remove unnecessary rules - #129

Merged

NickLarsenNZ merged 13 commits into

mainfrom

chore/rbac-review

Apr 7, 2026

Commits on Mar 25, 2026

chore: Describe RBAC rules, remove unnecessary rules
NickLarsenNZ
committed

Commits on Apr 2, 2026

chore: Add missing comment on rule
NickLarsenNZ
committed
chore: Remove the get for customresourcedefinitions for the operator clusterrole
NickLarsenNZ
committed
chore: Remove the nodes list/watch rule for the operator clusterrole
NickLarsenNZ
committed
chore: Remove the configmaps/secrets/serviceaccounts get rule for the product clusterrole
NickLarsenNZ
committed
chore: Always allow customresourcedefinitions list/watch.
NickLarsenNZ
committed
fix: Gate the openshift rules
NickLarsenNZ
committed
chore: Simplify RBAC rule comments
NickLarsenNZ
committed
chore: Remove the events.k8s.io rule from the product ClusterRole unless the products actually emit Kubernetes events
NickLarsenNZ
committed
chore: Group rbac.authorization.k8s.io rules together
NickLarsenNZ
committed
chore: Split the roles.yaml into separate files for clusterrole-operator.yaml and clusterrole-product.yaml
NickLarsenNZ
committed
chore: Fix comment
NickLarsenNZ
committed
chore: Update changelog
NickLarsenNZ
committed