Skip to content

Commit 92008a0

Browse files
committed
fix: remove nonResourceURLs from RBAC rules for event reporters
Eliminate unnecessary nonResourceURLs permissions from the RBAC configuration of both cluster and runtime event reporters to enhance security and adhere to least privilege principles.
1 parent 12c4ead commit 92008a0

File tree

2 files changed

+0
-8
lines changed
  • charts/gitops-runtime/templates/event-reporters

2 files changed

+0
-8
lines changed

charts/gitops-runtime/templates/event-reporters/cluster-event-reporter/rbac.yaml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,10 +23,6 @@ rules:
2323
- '*'
2424
verbs:
2525
- '*'
26-
- nonResourceURLs:
27-
- '*'
28-
verbs:
29-
- '*'
3026
---
3127
apiVersion: rbac.authorization.k8s.io/v1
3228
kind: {{ $context.Values.global.runtime.singleNamespace | ternary "RoleBinding" "ClusterRoleBinding" }}

charts/gitops-runtime/templates/event-reporters/runtime-event-reporter/rbac.yaml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,10 +23,6 @@ rules:
2323
- '*'
2424
verbs:
2525
- '*'
26-
- nonResourceURLs:
27-
- '*'
28-
verbs:
29-
- '*'
3026
---
3127
apiVersion: rbac.authorization.k8s.io/v1
3228
kind: {{ $context.Values.global.runtime.singleNamespace | ternary "RoleBinding" "ClusterRoleBinding" }}

0 commit comments

Comments
 (0)