From 8fe62b755cfcaa41221c76f737eba23a347fef45 Mon Sep 17 00:00:00 2001
From: Sanket Sudake <sanketsudake@gmail.com>
Date: Wed, 12 Oct 2022 12:50:51 +0530
Subject: [PATCH] Grant CustomResourcedefintion read permission to specific
 components (#2567)

Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
---
 charts/fission-all/templates/buildermgr/clusterrole.yaml  | 8 --------
 charts/fission-all/templates/controller/clusterrole.yaml  | 2 --
 charts/fission-all/templates/executor/clusterrole.yaml    | 8 --------
 charts/fission-all/templates/kubewatcher/clusterrole.yaml | 8 --------
 .../templates/mqt-fission-kafka/clusterrole.yaml          | 8 --------
 charts/fission-all/templates/mqt-keda/clusterrole.yaml    | 8 --------
 .../templates/pre-upgrade-checks/clusterrole.yaml         | 2 --
 charts/fission-all/templates/router/clusterrole.yaml      | 8 --------
 charts/fission-all/templates/timer/clusterrole.yaml       | 8 --------
 9 files changed, 60 deletions(-)

diff --git a/charts/fission-all/templates/buildermgr/clusterrole.yaml b/charts/fission-all/templates/buildermgr/clusterrole.yaml
index bf5dd6f9..b95af5cb 100644
--- a/charts/fission-all/templates/buildermgr/clusterrole.yaml
+++ b/charts/fission-all/templates/buildermgr/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/controller/clusterrole.yaml b/charts/fission-all/templates/controller/clusterrole.yaml
index f01d10e7..05514696 100644
--- a/charts/fission-all/templates/controller/clusterrole.yaml
+++ b/charts/fission-all/templates/controller/clusterrole.yaml
@@ -41,8 +41,6 @@ rules:
   - customresourcedefinitions
   verbs:
   - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/executor/clusterrole.yaml b/charts/fission-all/templates/executor/clusterrole.yaml
index 379cb0d4..75df2ff7 100644
--- a/charts/fission-all/templates/executor/clusterrole.yaml
+++ b/charts/fission-all/templates/executor/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/kubewatcher/clusterrole.yaml b/charts/fission-all/templates/kubewatcher/clusterrole.yaml
index ebbd87b5..5f44393e 100644
--- a/charts/fission-all/templates/kubewatcher/clusterrole.yaml
+++ b/charts/fission-all/templates/kubewatcher/clusterrole.yaml
@@ -43,14 +43,6 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml b/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml
index 7acd47fa..98409356 100644
--- a/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml
+++ b/charts/fission-all/templates/mqt-fission-kafka/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/mqt-keda/clusterrole.yaml b/charts/fission-all/templates/mqt-keda/clusterrole.yaml
index 5965e2ff..f097005b 100644
--- a/charts/fission-all/templates/mqt-keda/clusterrole.yaml
+++ b/charts/fission-all/templates/mqt-keda/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml b/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml
index 66f213c3..3ce069c3 100644
--- a/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml
+++ b/charts/fission-all/templates/pre-upgrade-checks/clusterrole.yaml
@@ -13,8 +13,6 @@ rules:
   - customresourcedefinitions
   verbs:
   - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/router/clusterrole.yaml b/charts/fission-all/templates/router/clusterrole.yaml
index 0b66ece3..4eb3c7aa 100644
--- a/charts/fission-all/templates/router/clusterrole.yaml
+++ b/charts/fission-all/templates/router/clusterrole.yaml
@@ -47,14 +47,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources:
diff --git a/charts/fission-all/templates/timer/clusterrole.yaml b/charts/fission-all/templates/timer/clusterrole.yaml
index a4343983..29bb134b 100644
--- a/charts/fission-all/templates/timer/clusterrole.yaml
+++ b/charts/fission-all/templates/timer/clusterrole.yaml
@@ -35,14 +35,6 @@ rules:
   - update
   - patch
   - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - fission.io
   resources: