From 2282981fea56eafa5b273b893bafcf56bbc8a212 Mon Sep 17 00:00:00 2001 From: Jonathan Innis Date: Fri, 12 Jan 2024 10:45:30 -0800 Subject: [PATCH] Remove create node permission from ClusterRole --- charts/karpenter/templates/clusterrole-core.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/karpenter/templates/clusterrole-core.yaml b/charts/karpenter/templates/clusterrole-core.yaml index 692bbafc6157..1bce8bfcfc5a 100644 --- a/charts/karpenter/templates/clusterrole-core.yaml +++ b/charts/karpenter/templates/clusterrole-core.yaml @@ -61,7 +61,7 @@ rules: verbs: ["create", "patch"] - apiGroups: [""] resources: ["nodes"] - verbs: ["create", "patch", "delete"] + verbs: ["patch", "delete"] - apiGroups: [""] resources: ["pods/eviction"] verbs: ["create"]