Merge pull request #8647 from johejo/restrict_nodes_verbs_for_ca

Restrict create/delete verbs on nodes

Author: k8s-ci-robot

cluster-autoscaler/charts/cluster-autoscaler/Chart.yaml

@@ -11,4 +11,4 @@ name: cluster-autoscaler
 sources:
   - https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler
 type: application
-version: 9.52.0
+version: 9.52.1

cluster-autoscaler/charts/cluster-autoscaler/templates/clusterrole.yaml

@@ -53,8 +53,12 @@ rules:
     verbs:
     - watch
     - list
+{{- if (eq .Values.cloudProvider "kwok") }}
     - create
+{{- end }}
+{{- if or (eq .Values.cloudProvider "kwok") (eq .Values.cloudProvider "huaweicloud") }}
     - delete
+{{- end }}
     - get
     - update
   - apiGroups: