Merge pull request #11050 from fossedihelm/remove_unauthenticated

fix: restrict default cluster role to authenticated only users
kubevirt · Jan 23, 2024 · 1e8346a · 1e8346a
2 parents 2ad6146 + a1ed7d5
commit 1e8346a
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 6 deletions.
diff --git a/pkg/virt-operator/resource/generate/rbac/cluster.go b/pkg/virt-operator/resource/generate/rbac/cluster.go
@@ -167,11 +167,6 @@ func newDefaultClusterRoleBinding() *rbacv1.ClusterRoleBinding {
 				APIGroup: VersionName,
 				Name:     "system:authenticated",
 			},
-			{
-				Kind:     "Group",
-				APIGroup: VersionName,
-				Name:     "system:unauthenticated",
-			},
 		},
 	}
 }

diff --git a/pkg/virt-operator/resource/generate/rbac/cluster_test.go b/pkg/virt-operator/resource/generate/rbac/cluster_test.go
@@ -75,7 +75,6 @@ var _ = Describe("Cluster role and cluster role bindings", func() {
 				expectSubjectExists(clusterRoleBinding.Subjects, kind, name)
 			},
 				Entry("system:authenticated", "Group", "system:authenticated"),
-				Entry("system:unauthenticated", "Group", "system:unauthenticated"),
 			)
 		})