Remove CSR's related RBAC (#149)

The current kube-admission-webhook library does not use CSRs anymore so RBAC is not needed. Signed-off-by: Quique Llorente <[email protected]>
k8snetworkplumbingwg · May 21, 2020 · b186e7a · b186e7a
1 parent 0c568f7
commit b186e7a
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 21 deletions.
diff --git a/config/default/rbac/rbac_role.yaml b/config/default/rbac/rbac_role.yaml
@@ -4,13 +4,6 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  - certificatesigningrequests/approval
-  verbs:
-  - "*"
 - apiGroups:
   - admissionregistration.k8s.io
   resources:

diff --git a/config/release/kubemacpool.yaml b/config/release/kubemacpool.yaml
@@ -82,13 +82,6 @@ metadata:
   creationTimestamp: null
   name: kubemacpool-manager-role
 rules:
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  - certificatesigningrequests/approval
-  verbs:
-  - '*'
 - apiGroups:
   - admissionregistration.k8s.io
   resources:

diff --git a/config/test/kubemacpool.yaml b/config/test/kubemacpool.yaml
@@ -82,13 +82,6 @@ metadata:
   creationTimestamp: null
   name: kubemacpool-manager-role
 rules:
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  - certificatesigningrequests/approval
-  verbs:
-  - '*'
 - apiGroups:
   - admissionregistration.k8s.io
   resources: