chore: Describe RBAC rules, remove unnecessary rules#953

Merged

NickLarsenNZ merged 14 commits into

mainfrom

chore/rbac-review

Apr 8, 2026

Commits on Mar 26, 2026

Commits on Apr 1, 2026

chore: Remove the get for customresourcedefinitions for the operator clusterrole.
NickLarsenNZ
committed
chore: Remove the nodes list/watch rule for the operator clusterrole.
NickLarsenNZ
committed
chore: Add comment to the rule that was missing one
NickLarsenNZ
committed
chore: Remove the configmaps/secrets/serviceaccounts/services get rule for the product clusterrole
NickLarsenNZ
committed
fix: Always allow list/watch on customresourcedefinitions for the operator
NickLarsenNZ
committed
chore: Simplify RBAC rule descriptions
NickLarsenNZ
committed
chore: Remove the events.k8s.io rule from the product ClusterRole. The operator manages the Kubernetes events.
NickLarsenNZ
committed
chore: Keep the rbac.authorization.k8s.io rules within a ClusterRole close to each other
NickLarsenNZ
committed
chore: Split the roles.yaml into separate files for clusterrole-operator.yaml and clusterrole-product.yaml
NickLarsenNZ
committed
chore(nix): Update crate hashes
NickLarsenNZ
committed

Commits on Apr 7, 2026

Update CHANGELOG.md
NickLarsenNZ
authored

Commits on Apr 8, 2026

Merge branch 'main' into chore/rbac-review
NickLarsenNZ
authored