From df311a8544e31836aed21cee285b01a706ee82d4 Mon Sep 17 00:00:00 2001
From: Jean-Francois Roy <jf@devklog.net>
Date: Wed, 4 Sep 2024 09:42:34 -0700
Subject: [PATCH] fix(ingress): remove secrets from clusterrole

---
 .../network/ingress-nginx/external/helmrelease.yaml   | 11 +++++++++++
 .../network/ingress-nginx/internal/helmrelease.yaml   | 11 +++++++++++
 2 files changed, 22 insertions(+)

diff --git a/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
index 26e6afcd..c36e7625 100644
--- a/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
+++ b/kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml
@@ -99,3 +99,14 @@ spec:
           memory: 96Mi
         limits:
           memory: 2Gi
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: rbac.authorization.k8s.io
+              version: v1
+              kind: ClusterRole
+              name: ingress-nginx-external
+            patch: |
+              - op: remove
+                path: /rules/0/resources/4
diff --git a/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
index 6dee227d..16d731fb 100644
--- a/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
+++ b/kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml
@@ -94,3 +94,14 @@ spec:
           memory: 96Mi
         limits:
           memory: 2Gi
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              group: rbac.authorization.k8s.io
+              version: v1
+              kind: ClusterRole
+              name: ingress-nginx-internal
+            patch: |
+              - op: remove
+                path: /rules/0/resources/4