diff --git a/neonvm/config/rbac/auth_proxy_client_clusterrole.yaml b/neonvm/config/rbac/auth_proxy_client_clusterrole.yaml deleted file mode 100644 index 0ea7af10f..000000000 --- a/neonvm/config/rbac/auth_proxy_client_clusterrole.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: clusterrole - app.kubernetes.io/instance: metrics-reader - app.kubernetes.io/component: kube-rbac-proxy - app.kubernetes.io/created-by: neonvm - app.kubernetes.io/part-of: neonvm - app.kubernetes.io/managed-by: kustomize - name: metrics-reader -rules: -- nonResourceURLs: - - "/metrics" - verbs: - - get diff --git a/neonvm/config/rbac/auth_proxy_role.yaml b/neonvm/config/rbac/auth_proxy_role.yaml deleted file mode 100644 index af70316ab..000000000 --- a/neonvm/config/rbac/auth_proxy_role.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: clusterrole - app.kubernetes.io/instance: proxy-role - app.kubernetes.io/component: kube-rbac-proxy - app.kubernetes.io/created-by: neonvm - app.kubernetes.io/part-of: neonvm - app.kubernetes.io/managed-by: kustomize - name: proxy-role -rules: -- apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create diff --git a/neonvm/config/rbac/auth_proxy_role_binding.yaml b/neonvm/config/rbac/auth_proxy_role_binding.yaml deleted file mode 100644 index 3c4ab0e28..000000000 --- a/neonvm/config/rbac/auth_proxy_role_binding.yaml +++ /dev/null @@ -1,19 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: clusterrolebinding - app.kubernetes.io/instance: proxy-rolebinding - app.kubernetes.io/component: kube-rbac-proxy - app.kubernetes.io/created-by: neonvm - app.kubernetes.io/part-of: neonvm - app.kubernetes.io/managed-by: kustomize - name: proxy-rolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: proxy-role -subjects: -- kind: ServiceAccount - name: controller - namespace: system diff --git a/neonvm/config/rbac/auth_proxy_service.yaml b/neonvm/config/rbac/auth_proxy_service.yaml deleted file mode 100644 index d3dd982c4..000000000 --- a/neonvm/config/rbac/auth_proxy_service.yaml +++ /dev/null @@ -1,21 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - labels: - control-plane: controller - app.kubernetes.io/name: service - app.kubernetes.io/instance: controller-metrics-service - app.kubernetes.io/component: kube-rbac-proxy - app.kubernetes.io/created-by: neonvm - app.kubernetes.io/part-of: neonvm - app.kubernetes.io/managed-by: kustomize - name: controller-metrics-service - namespace: system -spec: - ports: - - name: https - port: 8443 - protocol: TCP - targetPort: https - selector: - control-plane: controller diff --git a/neonvm/config/rbac/kustomization.yaml b/neonvm/config/rbac/kustomization.yaml index 8a95ef863..1a80c6613 100644 --- a/neonvm/config/rbac/kustomization.yaml +++ b/neonvm/config/rbac/kustomization.yaml @@ -8,10 +8,3 @@ resources: - virtualmachine_editor_role.yaml - virtualmachinemigration_viewer_role.yaml - virtualmachinemigration_editor_role.yaml -# Comment the following 4 lines if you want to disable -# the auth proxy (https://github.com/brancz/kube-rbac-proxy) -# which protects your /metrics endpoint. -- auth_proxy_service.yaml -- auth_proxy_role.yaml -- auth_proxy_role_binding.yaml -- auth_proxy_client_clusterrole.yaml