From 424a8e270da05b1c0fdede96c9362fe4df29a683 Mon Sep 17 00:00:00 2001
From: dttung2905 <ttdao.2015@accountancy.smu.edu.sg>
Date: Fri, 30 Jan 2026 18:15:54 +0000
Subject: [PATCH] Tighten / remove nodes/proxy GET permission for NFD in the
 helm chart

Signed-off-by: dttung2905 <ttdao.2015@accountancy.smu.edu.sg>
---
 .../node-feature-discovery/templates/clusterrole.yaml     | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/deployments/gpu-operator/charts/node-feature-discovery/templates/clusterrole.yaml b/deployments/gpu-operator/charts/node-feature-discovery/templates/clusterrole.yaml
index ea6e3e30f..714d28cf6 100644
--- a/deployments/gpu-operator/charts/node-feature-discovery/templates/clusterrole.yaml
+++ b/deployments/gpu-operator/charts/node-feature-discovery/templates/clusterrole.yaml
@@ -82,7 +82,7 @@ rules:
 - apiGroups:
     - ""
   resources:
-    - nodes/proxy
+    - nodes/configz
   verbs:
     - get
 - apiGroups:
@@ -117,12 +117,6 @@ rules:
   verbs:
   - list
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - nodes/proxy
-  verbs:
-  - get
 - apiGroups:
   - topology.node.k8s.io
   resources: