Merge pull request #78 from gocd/trim-permissions

Remove unnecessary ClusterRole permissions
gocd · Jan 22, 2023 · 3cbfa8f · 3cbfa8f
2 parents 566a2a4 + 1115417
commit 3cbfa8f
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 7 deletions.
diff --git a/gocd/CHANGELOG.md b/gocd/CHANGELOG.md
@@ -1,3 +1,5 @@
+### 2.0.3
+* Remove permissions unnecessary for elastic agents from default ClusterRole
 ### 2.0.2
 * Bump pre-installed plugins to latest patched versions (thanks to @chadlwilson)
 * Bump Helm test tools to latest versions (thanks to @chadlwilson)

diff --git a/gocd/Chart.yaml b/gocd/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: gocd
 home: https://www.gocd.org/
-version: 2.0.2
+version: 2.0.3
 appVersion: 22.3.0
 description: GoCD is an open-source continuous delivery server to model and visualize complex workflows with ease.
 icon: https://gocd.github.io/assets/images/go-icon-black-192x192.png

diff --git a/gocd/templates/gocd-ea-cluster-role.yaml b/gocd/templates/gocd-ea-cluster-role.yaml
@@ -17,13 +17,9 @@ rules:
 - apiGroups: [""]
   resources:
   - nodes
-  verbs: ["get", "list"]
+  verbs: ["list"]
 - apiGroups: [""]
   resources:
   - events
-  verbs: ["list", "watch"]
-- apiGroups: [""]
-  resources:
-  - namespaces
-  verbs: ["get"]
+  verbs: ["list"]
 {{ end }}