Remove permissions required for reconciler.

Author: dargudear-google

Makefile

@@ -399,9 +399,7 @@ e2e-provider-deploy:
 e2e-deploy-manifest:
 	kubectl apply -f manifest_staging/deploy/csidriver.yaml
 	kubectl apply -f manifest_staging/deploy/rbac-secretproviderclass.yaml
-	kubectl apply -f manifest_staging/deploy/rbac-secretproviderrotation.yaml
 	kubectl apply -f manifest_staging/deploy/rbac-secretprovidersyncing.yaml
-	kubectl apply -f manifest_staging/deploy/rbac-secretprovidertokenrequest.yaml
 	kubectl apply -f manifest_staging/deploy/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml
 	kubectl apply -f manifest_staging/deploy/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml
 	kubectl apply -f manifest_staging/deploy/role-secretproviderclasses-admin.yaml

manifest_staging/charts/secrets-store-csi-driver/templates/role-rotation.yaml

@@ -83,29 +83,15 @@ export VALIDATE_TOKENS_AUDIENCE=$(get_token_requests_audience)
   run kubectl get clusterrole/secretproviderclasspodstatuses-viewer-role
   assert_success
 
-  run kubectl get clusterrole/secretproviderrotation-role
-  assert_success
 
   run kubectl get clusterrole/secretprovidersyncing-role
   assert_success
 
   run kubectl get clusterrolebinding/secretproviderclasses-rolebinding
   assert_success
 
-  run kubectl get clusterrolebinding/secretproviderrotation-rolebinding
-  assert_success
-
   run kubectl get clusterrolebinding/secretprovidersyncing-rolebinding
   assert_success
-
-  # validate token request role and rolebinding only when token requests are set
-  if [[ -n "${VALIDATE_TOKENS_AUDIENCE}" ]]; then
-    run kubectl get clusterrole/secretprovidertokenrequest-role
-    assert_success
-
-    run kubectl get clusterrolebinding/secretprovidertokenrequest-rolebinding
-    assert_success
-  fi
 }
 
 @test "[v1alpha1] deploy e2e-provider secretproviderclass crd" {