chore: Describe RBAC rules, remove unnecessary rules#869

Merged

NickLarsenNZ merged 13 commits intomainfrom

chore/rbac-review

Apr 9, 2026

Commits on Mar 25, 2026

Commits on Apr 2, 2026

Apply suggestions from code review
NickLarsenNZ
authored

Commits on Apr 8, 2026

chore: Add missing rule descriptions
NickLarsenNZ
committed
chore: Remove the get for customresourcedefinitions for the operator clusterrole
NickLarsenNZ
committed
chore: Remove the configmaps/secrets/serviceaccounts get rule for the product clusterrole
NickLarsenNZ
committed
chore: Always allow list/watch for customresourcedefinitions
NickLarsenNZ
committed
chore: Simplify the rule descriptions
NickLarsenNZ
committed
chore: Remove the events.k8s.io rule from the product ClusterRole
NickLarsenNZ
committed
chore: Keep the rbac.authorization.k8s.io rules within a ClusterRole close to each other
NickLarsenNZ
committed
chore: Split the roles.yaml into separate files for clusterrole-operator.yaml and clusterrole-product.yaml
NickLarsenNZ
committed

Commits on Apr 9, 2026