address review feedback

gardener · Nov 20, 2024 · 42307bd · 42307bd
1 parent ecf3511
commit 42307bd
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 29 deletions.
diff --git a/charts/gardener-extension-admission-aws/charts/application/templates/rbac.yaml b/charts/gardener-extension-admission-aws/charts/application/templates/rbac.yaml
@@ -21,10 +21,6 @@ rules:
   - secrets
   verbs:
   - get
-  - list
-  - create
-  - patch
-  - watch
 - apiGroups:
   - ""
   resources:
@@ -45,30 +41,6 @@ rules:
   - watch
   - patch
   - update
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  resourceNames:
-  - {{ include "name" . }}
-  verbs:
-  - get
-  - watch
-  - update
-- apiGroups:
-  - events.k8s.io
-  resources:
-  - events
-  verbs:
-  - create
-  - patch
-  - update
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/charts/gardener-extension-provider-aws/templates/deployment.yaml b/charts/gardener-extension-provider-aws/templates/deployment.yaml
@@ -72,7 +72,7 @@ spec:
         - --webhook-config-service-port={{ .Values.webhookConfig.servicePort }}
         - --webhook-config-server-port={{ .Values.webhookConfig.serverPort }}
         {{- if .Values.gardener.runtimeCluster.enabled }}
-        - --disable-controllers=backupentry,bastion,controlplane,infrastructure,worker,healthcheck
+        - --controllers=backupbucket,dnsrecord
         - --disable-webhooks="*"
         - --extension-class=garden
         {{- else }}