diff --git a/CHANGELOG.md b/CHANGELOG.md index 5bcbcaa3..f200756b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,7 +9,7 @@ ### Changed -- Document Helm deployed RBAC permissions and remove unnecessary permissions ([#767]). +- Document Helm deployed RBAC permissions and remove unnecessary permissions ([#767], [#774]). ### Fixed @@ -19,6 +19,7 @@ [#765]: https://github.com/stackabletech/airflow-operator/pull/765 [#767]: https://github.com/stackabletech/airflow-operator/pull/767 [#770]: https://github.com/stackabletech/airflow-operator/pull/770 +[#774]: https://github.com/stackabletech/airflow-operator/pull/774 ## [26.3.0] - 2026-03-16 diff --git a/deploy/helm/airflow-operator/templates/clusterrole-product.yaml b/deploy/helm/airflow-operator/templates/clusterrole-product.yaml index cb5bb8f4..ea6fbe39 100644 --- a/deploy/helm/airflow-operator/templates/clusterrole-product.yaml +++ b/deploy/helm/airflow-operator/templates/clusterrole-product.yaml @@ -28,14 +28,6 @@ rules: - pods/log verbs: - get - # Airflow components publish Kubernetes events - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - patch {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }} # On OpenShift: allows workload pods to use the nonroot-v2 SecurityContextConstraint - apiGroups: