remove clusterrole/binding kyverno:policyviolations

charts/kyverno/templates/clusterrole.yaml

@@ -1,16 +1,6 @@
 {{- if .Values.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
-metadata:
-  name: {{ template "kyverno.fullname" . }}:policyviolations
-rules:
-- apiGroups: ["kyverno.io"]
-  resources:
-  - policyviolations
-  verbs: ["get", "list", "watch", "delete"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
 metadata:
   name: {{ template "kyverno.fullname" . }}:webhook
 rules:

charts/kyverno/templates/clusterrolebinding.yaml

@@ -1,17 +1,4 @@
 {{- if .Values.rbac.create }}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: {{ template "kyverno.fullname" . }}:policyviolations
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: {{ template "kyverno.fullname" . }}:policyviolations
-subjects:
-- kind: ServiceAccount
-  name: {{ template "kyverno.serviceAccountName" . }}
-  namespace: {{ template "kyverno.namespace" . }}
----
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

definitions/install.yaml

@@ -2875,21 +2875,6 @@ rules:
   verbs:
   - approve
 ---
-apiVersion: rbac.authorization.k8s.io/v1beta1
-kind: ClusterRole
-metadata:
-  name: kyverno:policyviolations
-rules:
-- apiGroups:
-  - kyverno.io
-  resources:
-  - policyviolations
-  verbs:
-  - get
-  - list
-  - watch
-  - delete
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -2931,19 +2916,6 @@ subjects:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
-metadata:
-  name: kyverno:policyviolations
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kyverno:policyviolations
-subjects:
-- kind: ServiceAccount
-  name: kyverno-service-account
-  namespace: kyverno
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
 metadata:
   name: kyverno:userinfo
 roleRef:

definitions/install_debug.yaml

@@ -2875,21 +2875,6 @@ rules:
   verbs:
   - approve
 ---
-apiVersion: rbac.authorization.k8s.io/v1beta1
-kind: ClusterRole
-metadata:
-  name: kyverno:policyviolations
-rules:
-- apiGroups:
-  - kyverno.io
-  resources:
-  - policyviolations
-  verbs:
-  - get
-  - list
-  - watch
-  - delete
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -2931,19 +2916,6 @@ subjects:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
-metadata:
-  name: kyverno:policyviolations
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kyverno:policyviolations
-subjects:
-- kind: ServiceAccount
-  name: kyverno-service-account
-  namespace: kyverno
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
 metadata:
   name: kyverno:userinfo
 roleRef:

definitions/k8s-resource/clusterrolebindings.yaml

@@ -1,17 +1,4 @@
 ---
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kyverno:policyviolations
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kyverno:policyviolations
-subjects:
-- kind: ServiceAccount
-  name: kyverno-service-account
-  namespace: kyverno
----
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

definitions/k8s-resource/clusterroles.yaml

@@ -26,16 +26,6 @@ metadata:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
-metadata:
-  name: kyverno:policyviolations
-rules:
-- apiGroups: ["kyverno.io"]
-  resources:
-  - policyviolations
-  verbs: ["get", "list", "watch", "delete"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
 metadata:
   name: kyverno:webhook
 rules: