Don't give operator permissions to create CRDs if not needed

Signed-off-by: Cheithanya <cheithanya2002@gmail.com>
cilium · Jul 12, 2024 · 21ae8bc · 21ae8bc
1 parent b83e10c
commit 21ae8bc
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/install/kubernetes/tetragon/templates/operator_clusterrole.yaml b/install/kubernetes/tetragon/templates/operator_clusterrole.yaml
@@ -26,12 +26,14 @@ rules:
       - patch
       - update
       - watch
+  {{- if eq .Values.crds.installMethod "operator" }}
   - apiGroups:
       - apiextensions.k8s.io
     resources:
       - customresourcedefinitions
     verbs:
       - create
+  {{- end }}
   - apiGroups:
       - apiextensions.k8s.io
     resources: