Remove the permissions related to secrets.

[Syulin7]

Currently, the training-operator has permission to access secrets, which it likely does not need and could pose a security risk. I suggest removing the permissions related to secrets.

training-operator/manifests/base/cluster-role.yaml

Lines 71 to 81 in fc8a644

	- apiGroups:
	- ""
	resources:
	- configmaps
	- secrets
	- serviceaccounts
	verbs:
	- create
	- list
	- watch
	- update

[Syulin7]

@johnugeorge @tenzen-y WDYT, If the training-operator is using secrets, please let me know.

[tenzen-y]

@Syulin7 Thank you for realizing this. I agree with you.
Also, we should auto-generate RBAC manifests by the controller-gen. Then, we can avoid such this situation :)

[johnugeorge]

@Syulin7 Can you help fix it?

[Syulin7]

/assign