fix(ingress): remove secrets from clusterrole

jfroy · Sep 4, 2024 · df311a8 · df311a8
1 parent b1fd5d7
commit df311a8
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
@@ -99,3 +99,14 @@ spec:
           memory: 96Mi
         limits:
           memory: 2Gi
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: rbac.authorization.k8s.io
+              version: v1
+              kind: ClusterRole
+              name: ingress-nginx-external
+            patch: |
+              - op: remove
+                path: /rules/0/resources/4
diff --git a/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
@@ -94,3 +94,14 @@ spec:
           memory: 96Mi
         limits:
           memory: 2Gi
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: rbac.authorization.k8s.io
+              version: v1
+              kind: ClusterRole
+              name: ingress-nginx-internal
+            patch: |
+              - op: remove
+                path: /rules/0/resources/4