cilium / cilium

eBPF-based Networking, Security, and Observability
https://cilium.io
Apache License 2.0
19.16k stars 2.78k forks source link

cilium-agent: remove unused permissions for CNP/CCNP status #33228

Closed marseel closed 1 week ago

marseel commented 1 week ago

CNP/CCNP node statuses have been removed in #24503 Currently, only the operator is updating CNP/CCNP status for derived policies.

Related #29590

Removed cilium-agent permissions to update CiliumNetworkPolicy and CiliumClusterWideNetworkPolicy statuses
marseel commented 1 week ago

/test

squeed commented 1 week ago

Looks good.

FYI, I added a new controller to the operator that updates CNP / CCNP status to perform validation.