kubebuilder
kubebuilder copied to clipboard
RBAC for `get` on status subresource is unnecessary
trafficstars
What broke? What's expected?
I created an API and Kubebuilder generated editor and viewer cluster roles for me. I notice that the scaffolding code includes a rule like:
- apiGroups:
- example.com
resources:
- widgets/status
verbs:
- get
As far as I can tell, there is no get verb on the status subresource. Just update and patch.
Reproducing this issue
Run kubebuilder create api with any input that results in an API being successfully created in a project.
KubeBuilder (CLI) Version
master
PROJECT version
N/A
Plugin versions
Looks like this is present in kustomize/v1, kustomize/v2, golang/v3, and golang/v2.
Other versions
No response
Extra Labels
/kind cleanup