From b34f6ef324ad038de4e235706f84f7075a8c836b Mon Sep 17 00:00:00 2001 From: aimuz Date: Thu, 24 Nov 2022 09:38:03 +0800 Subject: [PATCH] remove the configmap related permissions (#9310) ref: https://github.com/kubernetes/ingress-nginx/pull/8921 We have used the Lease API for selection Signed-off-by: aimuz Signed-off-by: aimuz --- .../templates/controller-role.yaml | 20 ------------------- 1 file changed, 20 deletions(-) diff --git a/charts/ingress-nginx/templates/controller-role.yaml b/charts/ingress-nginx/templates/controller-role.yaml index 395c88e10..d1aa9aac7 100644 --- a/charts/ingress-nginx/templates/controller-role.yaml +++ b/charts/ingress-nginx/templates/controller-role.yaml @@ -58,26 +58,6 @@ rules: - get - list - watch - # TODO(Jintao Zhang) - # Once we release a new version of the controller, - # we will be able to remove the configmap related permissions - # We have used the Lease API for selection - # ref: https://github.com/kubernetes/ingress-nginx/pull/8921 - - apiGroups: - - "" - resources: - - configmaps - resourceNames: - - {{ include "ingress-nginx.controller.electionID" . }} - verbs: - - get - - update - - apiGroups: - - "" - resources: - - configmaps - verbs: - - create - apiGroups: - coordination.k8s.io resources: