kubebuilder icon indicating copy to clipboard operation
kubebuilder copied to clipboard

RBAC for `get` on status subresource is unnecessary

Open joelanford opened this issue 1 year ago • 10 comments
trafficstars

What broke? What's expected?

I created an API and Kubebuilder generated editor and viewer cluster roles for me. I notice that the scaffolding code includes a rule like:

- apiGroups:
   - example.com
   resources:
   - widgets/status
   verbs:
   - get

As far as I can tell, there is no get verb on the status subresource. Just update and patch.

Reproducing this issue

Run kubebuilder create api with any input that results in an API being successfully created in a project.

KubeBuilder (CLI) Version

master

PROJECT version

N/A

Plugin versions

Looks like this is present in kustomize/v1, kustomize/v2, golang/v3, and golang/v2.

Other versions

No response

Extra Labels

/kind cleanup

joelanford avatar Feb 14 '24 22:02 joelanford