This is an automated email from the ASF dual-hosted git repository.
wilfreds pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-release.git
The following commit(s) were added to refs/heads/master by this push:
new fb48fc2 [YUNIKORN-3081] Remove pods get from admission controller
cluster role (#199)
fb48fc2 is described below
commit fb48fc2789ac5caef0d8bc2ed93847a84d1c927d
Author: Wilfred Spiegelenburg <[email protected]>
AuthorDate: Tue Jul 22 11:23:41 2025 +1000
[YUNIKORN-3081] Remove pods get from admission controller cluster role
(#199)
The admission controller code does not reference the pod retrieval. That
means it should not need the permission on a role.
Closes: #199
Signed-off-by: Wilfred Spiegelenburg <[email protected]>
---
.gitignore | 3 +++
helm-charts/yunikorn/templates/admission-controller-rbac.yaml | 3 ---
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/.gitignore b/.gitignore
index 8613ea4..bd1cc38 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,8 @@
.idea
.DS_Store
+staging/
staging/*
staging/**
target
+*.swp
+*.tmp
diff --git a/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
b/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
index 759de41..17d203f 100644
--- a/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
+++ b/helm-charts/yunikorn/templates/admission-controller-rbac.yaml
@@ -39,9 +39,6 @@ rules:
- apiGroups: ["admissionregistration.k8s.io"]
resources: ["mutatingwebhookconfigurations"]
verbs: ["get", "watch", "list", "create", "patch", "update", "delete"]
- - apiGroups: [""]
- resources: ["pods"]
- verbs: ["get"]
- apiGroups: [""]
resources: ["namespaces"]
verbs: ["get", "watch", "list"]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
