mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

chore: restrict default permissions ()

Browse source 
* restrict admission permissions

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* restrict background  permissions

Signed-off-by: ShutingZhao <shuting@nirmata.com>

* update install.yaml

Signed-off-by: ShutingZhao <shuting@nirmata.com>

---------

Signed-off-by: ShutingZhao <shuting@nirmata.com>
This commit is contained in:
shuting 2023-04-24 00:50:47 +08:00 • committed by GitHub
parent 5a6b3c86f6
commit a247d13eb5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 0 additions and 70 deletions
charts/kyverno/templates
admission-controller
clusterrole.yaml
background-controller
clusterrole.yaml
config
install-latest-testing.yaml

34
charts/kyverno/templates/admission-controller/clusterrole.yaml
View file

@ -96,40 +96,6 @@ rules:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
- ingressclasses
- networkpolicies
verbs:
- create
- update
- patch
- delete
- apiGroups:
- ''
resources:
- namespaces
- configmaps
- secrets
- resourcequotas
- limitranges
verbs:
- create
- update
- patch
- delete
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
- roles
verbs:
- create
- update
- patch
- delete
{{- with .Values.admissionController.rbac.clusterRole.extraResources }}
---
apiVersion: rbac.authorization.k8s.io/v1

1
charts/kyverno/templates/background-controller/clusterrole.yaml
View file

@ -63,7 +63,6 @@ rules:
- apiGroups:
- ""
resources:
- namespaces
- configmaps
- secrets
- resourcequotas

35
config/install-latest-testing.yaml
View file

@ -33970,40 +33970,6 @@ rules:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
- ingressclasses
- networkpolicies
verbs:
- create
- update
- patch
- delete
- apiGroups:
- ''
resources:
- namespaces
- configmaps
- secrets
- resourcequotas
- limitranges
verbs:
- create
- update
- patch
- delete
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
- roles
verbs:
- create
- update
- patch
- delete
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
@ -34076,7 +34042,6 @@ rules:
- apiGroups:
- ""
resources:
- namespaces
- configmaps
- secrets
- resourcequotas