[cosigned] Remove undefined apiGroups from policy clusterrole

Signed-off-by: Vladimir Nachev <vladimir.nachev@sap.com>
sigstore · May 18, 2022 · 59a8461 · 59a8461
1 parent 1afff48
commit 59a8461
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/200-clusterrole.yaml b/config/200-clusterrole.yaml
@@ -48,7 +48,7 @@ rules:
     resourceNames: ["clusterimagepolicies.cosigned.sigstore.dev"]
 
   # Allow reconciliation of the ClusterImagePolic CRDs.
-  - apiGroups: ["cosigned.sigstore.dev", "validating.clusterimagepolicy.sigstore.dev", "defaulting.clusterimagepolicy.sigstore.dev"]
+  - apiGroups: ["cosigned.sigstore.dev"]
     resources: ["clusterimagepolicies"]
     verbs: ["get", "list", "update", "watch", "patch"]