From 7d34efb1c3a1dd9d62a82fa23caf71259c0d3d61 Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Fri, 10 Apr 2026 11:47:13 +0200 Subject: [PATCH 1/2] chore: Remove unused RBAC permission for product role --- .../airflow-operator/templates/clusterrole-product.yaml | 8 -------- 1 file changed, 8 deletions(-) diff --git a/deploy/helm/airflow-operator/templates/clusterrole-product.yaml b/deploy/helm/airflow-operator/templates/clusterrole-product.yaml index cb5bb8f4..ea6fbe39 100644 --- a/deploy/helm/airflow-operator/templates/clusterrole-product.yaml +++ b/deploy/helm/airflow-operator/templates/clusterrole-product.yaml @@ -28,14 +28,6 @@ rules: - pods/log verbs: - get - # Airflow components publish Kubernetes events - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - patch {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }} # On OpenShift: allows workload pods to use the nonroot-v2 SecurityContextConstraint - apiGroups: From 984dfbdfc354da91d3146ea10061c93b9c9607e8 Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Fri, 10 Apr 2026 14:12:55 +0200 Subject: [PATCH 2/2] chore: Update changelog --- CHANGELOG.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5bcbcaa3..f200756b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,7 +9,7 @@ ### Changed -- Document Helm deployed RBAC permissions and remove unnecessary permissions ([#767]). +- Document Helm deployed RBAC permissions and remove unnecessary permissions ([#767], [#774]). ### Fixed @@ -19,6 +19,7 @@ [#765]: https://github.com/stackabletech/airflow-operator/pull/765 [#767]: https://github.com/stackabletech/airflow-operator/pull/767 [#770]: https://github.com/stackabletech/airflow-operator/pull/770 +[#774]: https://github.com/stackabletech/airflow-operator/pull/774 ## [26.3.0] - 2026-03-16