update RBAC with more detailed permission

kubernetes-retired · Apr 29, 2019 · 815bc55 · 815bc55
1 parent 35ac3be
commit 815bc55
Show file tree

Hide file tree

Showing 2 changed files with 32 additions and 3 deletions.
diff --git a/charts/federation-v2/charts/controllermanager/templates/clusterrole.yaml b/charts/federation-v2/charts/controllermanager/templates/clusterrole.yaml
@@ -56,14 +56,31 @@ rules:
 - apiGroups:
   - ""
   resources:
-  - configmaps
-  - secrets
-  - events
   - namespaces
   verbs:
   - get
   - watch
   - list
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - create
+  - update
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - get
   - create
   - update
   - patch

diff --git a/charts/federation-v2/charts/controllermanager/templates/role.yaml b/charts/federation-v2/charts/controllermanager/templates/role.yaml
@@ -57,7 +57,19 @@ rules:
   - ""
   resources:
   - configmaps
+  verbs:
+  - get
+  - create
+  - update
+- apiGroups:
+  - ""
+  resources:
   - secrets
+  verbs:
+  - get
+- apiGroups:
+  - ""
+  resources:
   - events
   verbs:
   - get