From d55939983b1a9e32b127bac2ba1bce6afc50a557 Mon Sep 17 00:00:00 2001 From: Vladimir Nachev Date: Thu, 19 May 2022 16:40:06 +0300 Subject: [PATCH] [cosigned] Remove undefined apiGroups from policy clusterrole (#1896) Signed-off-by: Vladimir Nachev --- config/200-clusterrole.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/200-clusterrole.yaml b/config/200-clusterrole.yaml index 44813272250..536a8f25a15 100644 --- a/config/200-clusterrole.yaml +++ b/config/200-clusterrole.yaml @@ -48,7 +48,7 @@ rules: resourceNames: ["clusterimagepolicies.cosigned.sigstore.dev"] # Allow reconciliation of the ClusterImagePolic CRDs. - - apiGroups: ["cosigned.sigstore.dev", "validating.clusterimagepolicy.sigstore.dev", "defaulting.clusterimagepolicy.sigstore.dev"] + - apiGroups: ["cosigned.sigstore.dev"] resources: ["clusterimagepolicies"] verbs: ["get", "list", "update", "watch", "patch"]