Remove permissions required for reconciler.

kubernetes-sigs · Oct 24, 2024 · 71c2fee · 71c2fee
1 parent f343fa4
commit 71c2fee
Show file tree

Hide file tree

Showing 8 changed files with 0 additions and 132 deletions.
diff --git a/Makefile b/Makefile
@@ -403,9 +403,7 @@ e2e-provider-deploy:
 e2e-deploy-manifest:
 	kubectl apply -f manifest_staging/deploy/csidriver.yaml
 	kubectl apply -f manifest_staging/deploy/rbac-secretproviderclass.yaml
-	kubectl apply -f manifest_staging/deploy/rbac-secretproviderrotation.yaml
 	kubectl apply -f manifest_staging/deploy/rbac-secretprovidersyncing.yaml
-	kubectl apply -f manifest_staging/deploy/rbac-secretprovidertokenrequest.yaml
 	kubectl apply -f manifest_staging/deploy/secrets-store.csi.x-k8s.io_secretproviderclasses.yaml
 	kubectl apply -f manifest_staging/deploy/secrets-store.csi.x-k8s.io_secretproviderclasspodstatuses.yaml
 	kubectl apply -f manifest_staging/deploy/role-secretproviderclasses-admin.yaml

diff --git a/manifest_staging/charts/secrets-store-csi-driver/templates/role-rotation.yaml b/manifest_staging/charts/secrets-store-csi-driver/templates/role-rotation.yaml
diff --git a/manifest_staging/charts/secrets-store-csi-driver/templates/role-rotation_binding.yaml b/manifest_staging/charts/secrets-store-csi-driver/templates/role-rotation_binding.yaml
diff --git a/manifest_staging/charts/secrets-store-csi-driver/templates/role-tokenrequest.yaml b/manifest_staging/charts/secrets-store-csi-driver/templates/role-tokenrequest.yaml
diff --git a/manifest_staging/charts/secrets-store-csi-driver/templates/role-tokenrequest_binding.yaml b/manifest_staging/charts/secrets-store-csi-driver/templates/role-tokenrequest_binding.yaml
diff --git a/manifest_staging/deploy/rbac-secretproviderrotation.yaml b/manifest_staging/deploy/rbac-secretproviderrotation.yaml
diff --git a/manifest_staging/deploy/rbac-secretprovidertokenrequest.yaml b/manifest_staging/deploy/rbac-secretprovidertokenrequest.yaml
diff --git a/test/bats/e2e-provider.bats b/test/bats/e2e-provider.bats
@@ -83,29 +83,15 @@ export VALIDATE_TOKENS_AUDIENCE=$(get_token_requests_audience)
   run kubectl get clusterrole/secretproviderclasspodstatuses-viewer-role
   assert_success
 
-  run kubectl get clusterrole/secretproviderrotation-role
-  assert_success
 
   run kubectl get clusterrole/secretprovidersyncing-role
   assert_success
 
   run kubectl get clusterrolebinding/secretproviderclasses-rolebinding
   assert_success
 
-  run kubectl get clusterrolebinding/secretproviderrotation-rolebinding
-  assert_success
-
   run kubectl get clusterrolebinding/secretprovidersyncing-rolebinding
   assert_success
-
-  # validate token request role and rolebinding only when token requests are set
-  if [[ -n "${VALIDATE_TOKENS_AUDIENCE}" ]]; then
-    run kubectl get clusterrole/secretprovidertokenrequest-role
-    assert_success
-
-    run kubectl get clusterrolebinding/secretprovidertokenrequest-rolebinding
-    assert_success
-  fi
 }
 
 @test "[v1alpha1] deploy e2e-provider secretproviderclass crd" {