Restrict create/delete verbs on nodes

Only few cloud providers actually need those verbs.

- create: kwok
- delete: kwok, huaweicloud

So, it would be better to restrict them to only those providers, following the principle of least privilege.

Signed-off-by: Mitsuo HEIJO <[email protected]>

Author: johejo

cluster-autoscaler/charts/cluster-autoscaler/Chart.yaml

@@ -11,4 +11,4 @@ name: cluster-autoscaler
 sources:
   - https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler
 type: application
-version: 9.52.0
+version: 9.52.1

cluster-autoscaler/charts/cluster-autoscaler/templates/clusterrole.yaml

@@ -53,8 +53,12 @@ rules:
     verbs:
     - watch
     - list
+{{- if (eq .Values.cloudProvider "kwok") }}
     - create
+{{- end }}
+{{- if or (eq .Values.cloudProvider "kwok") (eq .Values.cloudProvider "huaweicloud") }}
     - delete
+{{- end }}
     - get
     - update
   - apiGroups: