From 1f23c1b57ddc2e5afc3ba035ecc82579bb089171 Mon Sep 17 00:00:00 2001
From: Sanket Sudake <sanketsudake@gmail.com>
Date: Wed, 12 Oct 2022 12:50:51 +0530
Subject: [PATCH] Grant CustomResourcedefintion read permission to specific
 components (#2567)

Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
---
 charts/fission-all/templates/buildermgr/clusterrole.yaml  | 8 --------
 charts/fission-all/templates/controller/clusterrole.yaml  | 2 --
 charts/fission-all/templates/executor/clusterrole.yaml    | 8 --------
 charts/fission-all/templates/kubewatcher/clusterrole.yaml | 8 --------
 .../templates/mqt-fission-kafka/clusterrole.yaml          | 8 --------
 charts/fission-all/templates/mqt-keda/clusterrole.yaml    | 8 --------
 .../templates/pre-upgrade-checks/clusterrole.yaml         | 2 --
 charts/fission-all/templates/router/clusterrole.yaml      | 8 --------
 charts/fission-all/templates/timer/clusterrole.yaml       | 8 --------
 9 files changed, 60 deletions(-)

diff --git a/charts/fission-all/templates/buildermgr/clusterrole.yaml b/charts/fission-all/templates/buildermgr/clusterrole.yaml
index bf5dd6f99..b95af5cb2 100644
--- a/charts/fission-all/templates/buildermgr/clusterrole.yaml
+++ b/charts/fission-all/templates/buildermgr/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/controller/clusterrole.yaml b/charts/fission-all/templates/controller/clusterrole.yaml
index f01d10e71..055146961 100644
--- a/charts/fission-all/templates/controller/clusterrole.yaml
+++ b/charts/fission-all/templates/controller/clusterrole.yaml
@@ -41,8 +41,6 @@ rules:
   - customresourcedefinitions
   verbs:
   - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/executor/clusterrole.yaml b/charts/fission-all/templates/executor/clusterrole.yaml
index 379cb0d46..75df2ff7d 100644
--- a/charts/fission-all/templates/executor/clusterrole.yaml
+++ b/charts/fission-all/templates/executor/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/kubewatcher/clusterrole.yaml b/charts/fission-all/templates/kubewatcher/clusterrole.yaml
index ebbd87b55..5f44393e2 100644
--- a/charts/fission-all/templates/kubewatcher/clusterrole.yaml
+++ b/charts/fission-all/templates/kubewatcher/clusterrole.yaml
@@ -43,14 +43,6 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml b/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml
index 7acd47fa6..98409356c 100644
--- a/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml
+++ b/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/mqt-keda/clusterrole.yaml b/charts/fission-all/templates/mqt-keda/clusterrole.yaml
index 5965e2ff3..f097005bc 100644
--- a/charts/fission-all/templates/mqt-keda/clusterrole.yaml
+++ b/charts/fission-all/templates/mqt-keda/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml b/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml
index 66f213c38..3ce069c3b 100644
--- a/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml
+++ b/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml
@@ -13,8 +13,6 @@ rules:
   - customresourcedefinitions
   verbs:
   - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/router/clusterrole.yaml b/charts/fission-all/templates/router/clusterrole.yaml
index 0b66ece39..4eb3c7aa2 100644
--- a/charts/fission-all/templates/router/clusterrole.yaml
+++ b/charts/fission-all/templates/router/clusterrole.yaml
@@ -47,14 +47,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/timer/clusterrole.yaml b/charts/fission-all/templates/timer/clusterrole.yaml
index a4343983a..29bb134be 100644
--- a/charts/fission-all/templates/timer/clusterrole.yaml
+++ b/charts/fission-all/templates/timer/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources: