chore: Describe RBAC rules, remove unnecessary rules#916

Merged

NickLarsenNZ merged 11 commits intomainfrom

chore/rbac-review

Apr 7, 2026

Commits on Mar 26, 2026

Commits on Apr 2, 2026

Apply suggestions from code review
NickLarsenNZ
authored
chore: Add missing comments on RBAC rules
NickLarsenNZ
committed
chore: Remove the get for customresourcedefinitions for the operator clusterrole.
NickLarsenNZ
committed
chore: Remove the configmaps/secrets/serviceaccounts get rule for the product clusterrole
NickLarsenNZ
committed
fix: Always allow list/watch on customresourcedefinitions for the operator
NickLarsenNZ
committed
chore: Simplify RBAC rule descriptions
NickLarsenNZ
committed
chore: Remove the events.k8s.io rule from the product ClusterRole. The operator manages the Kubernetes events
NickLarsenNZ
committed
chore: Keep the rbac.authorization.k8s.io rules within a ClusterRole close to each other
NickLarsenNZ
committed
chore: Split the roles.yaml into separate files for clusterrole-operator.yaml and clusterrole-product.yaml
NickLarsenNZ
committed