Skip to content

🐛 remove unused RBAC permissions for secrets#1355

Merged
metal3-io-bot merged 1 commit into
metal3-io:mainfrom
Nordix:tuomo/remove-extra-rbac-privileges
Mar 25, 2026
Merged

🐛 remove unused RBAC permissions for secrets#1355
metal3-io-bot merged 1 commit into
metal3-io:mainfrom
Nordix:tuomo/remove-extra-rbac-privileges

Conversation

@tuminoid

Copy link
Copy Markdown
Member

Remove the kubebuilder RBAC marker granting full CRUD on secrets. The controller never accesses secrets. Also remove the dead secret cache configuration and stale secretCachingClient comment from main.go.

Remove the kubebuilder RBAC marker granting full CRUD on secrets. The
controller never accesses secrets. Also remove the dead secret cache
configuration and stale secretCachingClient comment from main.go.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
@metal3-io-bot metal3-io-bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Mar 25, 2026
@tuminoid

Copy link
Copy Markdown
Member Author

/hold

@metal3-io-bot metal3-io-bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Mar 25, 2026
@tuminoid

Copy link
Copy Markdown
Member Author

/test ?

@tuminoid

Copy link
Copy Markdown
Member Author

/test metal3-centos-e2e-feature-test-main-features
/test metal3-centos-e2e-feature-test-main-pivoting
/test metal3-centos-e2e-feature-test-main-remediation
/test metal3-centos-e2e-integration-test-main
/test metal3-ubuntu-e2e-integration-test-main

@tuminoid

Copy link
Copy Markdown
Member Author

@metal3-io-bot metal3-io-bot requested a review from kashifest March 25, 2026 12:52

@lentzi90 lentzi90 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

@metal3-io-bot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lentzi90

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@metal3-io-bot metal3-io-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 25, 2026

@adilGhaffarDev adilGhaffarDev left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@metal3-io-bot metal3-io-bot added the lgtm Indicates that a PR is ready to be merged. label Mar 25, 2026
@tuminoid

Copy link
Copy Markdown
Member Author

/unhold

@metal3-io-bot metal3-io-bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Mar 25, 2026
@tuminoid

Copy link
Copy Markdown
Member Author

/cherry-pick release-1.12
/cherry-pick release-1.11

@metal3-io-bot

Copy link
Copy Markdown
Contributor

@tuminoid: once the present PR merges, I will cherry-pick it on top of release-1.11, release-1.12 in new PRs and assign them to you.

Details

In response to this:

/cherry-pick release-1.12
/cherry-pick release-1.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@metal3-io-bot metal3-io-bot merged commit 0199d7b into metal3-io:main Mar 25, 2026
22 checks passed
@metal3-io-bot metal3-io-bot deleted the tuomo/remove-extra-rbac-privileges branch March 25, 2026 16:20
@metal3-io-bot metal3-io-bot added this to the IPAM - v1.13 milestone Mar 25, 2026
@metal3-io-bot

Copy link
Copy Markdown
Contributor

@tuminoid: #1355 failed to apply on top of branch "release-1.11":

Applying: remove unused RBAC permissions for secrets
Using index info to reconstruct a base tree...
M	controllers/ippool_controller.go
M	main.go
Falling back to patching base and 3-way merge...
Auto-merging main.go
CONFLICT (content): Merge conflict in main.go
Auto-merging controllers/ippool_controller.go
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 remove unused RBAC permissions for secrets

Details

In response to this:

/cherry-pick release-1.12
/cherry-pick release-1.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@metal3-io-bot

Copy link
Copy Markdown
Contributor

@tuminoid: #1355 failed to apply on top of branch "release-1.12":

Applying: remove unused RBAC permissions for secrets
Using index info to reconstruct a base tree...
M	controllers/ippool_controller.go
M	main.go
Falling back to patching base and 3-way merge...
Auto-merging main.go
CONFLICT (content): Merge conflict in main.go
Auto-merging controllers/ippool_controller.go
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 remove unused RBAC permissions for secrets

Details

In response to this:

/cherry-pick release-1.12
/cherry-pick release-1.11

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

tuminoid added a commit to Nordix/metal3-ipam that referenced this pull request Mar 31, 2026
Remove the kubebuilder RBAC marker granting full CRUD on secrets. The
controller never accesses secrets. Also remove the dead secret cache
configuration and stale secretCachingClient comment from main.go.

Manual cherry-pick of PR metal3-io#1355.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants