eraser
eraser copied to clipboard
[BUG] Unnecessary permissions
Version of Eraser
1.3.1
Expected Behavior
The Deployment eraser-controller-manager in the charts has delete
verb of the pods
resource (eraser-manager-role-clusterrole.yaml). However, after reading the source code of eraser, I didn't find any Kubernetes API usages that require this permission.Therefore, for security reasons, I suggest checking this permission to determine if it is truly unnecessary. If it is, the issue should be fixed by removing the unnecessary permission or other feasible methods.
Actual Behavior
No response
Steps To Reproduce
Use helm chart with default values.
Are you willing to submit PRs to contribute to this bug fix?
- [ ] Yes, I am willing to implement it.