#46 - Remove unneeded permissions from csi-s3 in k8s manifests (fe02df61) · Commits · Docker / Yandex Cloud S3 CSI Controller

deploy/kubernetes/csi-s3.yaml

+0 −16

Original line number	Diff line number	Diff line
		@@ -8,22 +8,6 @@ kind: ClusterRole
		apiVersion: rbac.authorization.k8s.io/v1
		metadata:
		name: csi-s3
		rules:
		- apiGroups: [""]
		resources: ["secrets"]
		verbs: ["get", "list"]
		- apiGroups: [""]
		resources: ["nodes"]
		verbs: ["get", "list", "update"]
		- apiGroups: [""]
		resources: ["namespaces"]
		verbs: ["get", "list"]
		- apiGroups: [""]
		resources: ["persistentvolumes"]
		verbs: ["get", "list", "watch", "update"]
		- apiGroups: ["storage.k8s.io"]
		resources: ["volumeattachments"]
		verbs: ["get", "list", "watch", "update"]
		---
		kind: ClusterRoleBinding
		apiVersion: rbac.authorization.k8s.io/v1