From 1d6584742eb78a9c2bf3f9f5a2902134197e3b5d Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Wed, 6 May 2026 16:36:56 +0000
Subject: [PATCH] chore: remove orphaned deployment/polaris-rbac.yaml (PRI-917)

PR #146 moved RBAC management to the infra repo (Flux). The local
RBAC apply steps were removed from the E2E workflow, but this file
was inadvertently left behind. It is now orphaned since the
polaris-dashboard-proxy-reader Role and RoleBinding are managed
by Flux.

See PRI-916 for context.
---
 deployment/polaris-rbac.yaml | 28 ----------------------------
 1 file changed, 28 deletions(-)
 delete mode 100644 deployment/polaris-rbac.yaml

diff --git a/deployment/polaris-rbac.yaml b/deployment/polaris-rbac.yaml
deleted file mode 100644
index a3b3629..0000000
--- a/deployment/polaris-rbac.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-# RBAC to allow authenticated users to proxy to the Polaris dashboard service.
-# The polaris plugin reads audit data via the Kubernetes service proxy:
-#   /api/v1/namespaces/polaris/services/http:polaris-dashboard:80/proxy/results.json
-# Without this Role + RoleBinding, users get a 403 when Headlamp proxies the request.
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: polaris-dashboard-proxy-reader
-  namespace: polaris
-rules:
-  - apiGroups: [""]
-    resources: ["services/proxy"]
-    resourceNames: ["polaris-dashboard", "http:polaris-dashboard:80"]
-    verbs: ["get"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: polaris-dashboard-proxy-reader
-  namespace: polaris
-subjects:
-  - kind: Group
-    name: system:authenticated
-    apiGroup: rbac.authorization.k8s.io
-roleRef:
-  kind: Role
-  name: polaris-dashboard-proxy-reader
-  apiGroup: rbac.authorization.k8s.io