Restrict cluster roles in Helm chart to relevant CAPI API groups
Opened this issue · 0 comments
Jont828 commented
Currently, hack/observability/cluster-api-visualizer/chart/templates/clusterrole.yaml
gives us permissions to all api groups and resources. We can revise this to be more specific and only give access to the resources we need to use clusterctl describe
and to use the kubectl client to fetch a CRD.