Remove nodes/metrics permission from ClusterRole

As part of least priviledge work, remove the nodes/metrics permission as we're not scraping nodes for information. Everything appears to continue working in STF without this permission.
infrawatch · Sep 18, 2023 · 0273250 · 0273250
1 parent 6bb6393
commit 0273250
Showing 1 changed file with 0 additions and 6 deletions.
diff --git a/roles/servicetelemetry/tasks/component_prometheus.yml b/roles/servicetelemetry/tasks/component_prometheus.yml
@@ -26,12 +26,6 @@
  metadata:
  name: prometheus-stf
  rules:
- - apiGroups:
- - ""
- resources:
- - nodes/metrics
- verbs:
- - get
  - nonResourceURLs:
  - /metrics
  verbs: