Merge pull request hashicorp#454 from hashicorp/restrict-server-acl-i…

…nit-role Restrict permissions for the server-acl-init job
ndhanushkodi · May 12, 2020 · da373a3 · da373a3
2 parents eaf1898 + 2090d89
commit da373a3
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 12 deletions.
diff --git a/scripts/generate-helm-config-for-hcs.sh b/scripts/generate-helm-config-for-hcs.sh
@@ -117,8 +117,6 @@ client:
   join: ${retry_join}
 connectInject:
   enabled: true
-syncCatalog:
-  enabled: true
 EOF
 
 echo

diff --git a/templates/server-acl-init-clusterrole.yaml b/templates/server-acl-init-clusterrole.yaml
@@ -11,22 +11,12 @@ metadata:
     heritage: {{ .Release.Service }}
     release: {{ .Release.Name }}
 rules:
-  - apiGroups: [""]
-    resources:
-      - pods
-    verbs:
-      - list
   - apiGroups: [""]
     resources:
       - secrets
     verbs:
       - create
       - get
-  - apiGroups: ["apps"]
-    resources:
-      - statefulsets
-    verbs:
-      - get
 {{- if .Values.connectInject.enabled }}
   - apiGroups: [""]
     resources: