Files
Rishabh SinghandGitHub 132f481f4b fix(kustomize,helm): Align Helm and Kustomize RBAC, args, and sideEffects via code tracing (#2936)
* fix(kustomize,helm): Align Helm and Kustomize RBAC, args, and sideEffects via code tracing
Remove over-provisioned webhook ClusterRole permissions (events,
resourcequotas, finalizers/status, extra verbs) that have zero code
usage in the webhook binary. Add missing pods and
scheduledsparkapplications to Helm policyRules that the
controller-runtime cache requires.
Add events permission to Kustomize controller leader-election Role
(controller has 19 recorder.Eventf calls). Add explicit --kube-api-qps,
--kube-api-burst, --feature-gates, and --timestamp-precision flags to
Kustomize deployments matching Helm defaults.
Fix Helm webhook sideEffects from NoneOnDryRun to None matching all 7
kubebuilder markers (follow-up PR#2915)

Signed-off-by: roburishabh <[email protected]>

* added resourcequotas: list to both Helm policyRules AND Kustomize ClusterRole

Signed-off-by: roburishabh <[email protected]>

---------

Signed-off-by: roburishabh <[email protected]>
2026-05-15 16:31:01 +00:00
..