align with openyurt charts refs/heads/master from commit 7c1198a16fd7…

…edd3a0364e4d02a7936f8b3495d3
openyurtio · Oct 24, 2023 · 3729f6d · 3729f6d
1 parent 797ce46
commit 3729f6d
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 33 deletions.
diff --git a/charts/yurt-manager/templates/yurt-manager-auto-generated.yaml b/charts/yurt-manager/templates/yurt-manager-auto-generated.yaml
@@ -7,29 +7,43 @@
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
+kind: Role
 metadata:
   creationTimestamp: null
   name: yurt-manager-role
+  namespace: {{ .Release.Namespace }}
 rules:
 - apiGroups:
   - ""
   resources:
-  - configmaps
+  - secrets
   verbs:
+  - create
   - get
-  - list
-  - watch
+  - patch
+  - update
 - apiGroups:
   - ""
   resources:
-  - secret
+  - secrets
   verbs:
-  - create
   - get
-  - list
-  - patch
   - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: yurt-manager-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - admissionregistration.k8s.io
   resources:
@@ -317,18 +331,6 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - ""
   resources:
@@ -347,18 +349,6 @@ rules:
   - pods/status
   verbs:
   - update
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - ""
   resources:

diff --git a/charts/yurt-manager/templates/yurt-manager.yaml b/charts/yurt-manager/templates/yurt-manager.yaml
@@ -1,4 +1,10 @@
 apiVersion: v1
+kind: Secret
+metadata:
+  name: yurt-manager-webhook-certs
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: yurt-manager
@@ -19,7 +25,20 @@ subjects:
   name: yurt-manager
   namespace: {{ .Release.Namespace }}
 ---
-
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: yurt-manager-role-binding
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: yurt-manager-role
+subjects:
+  - kind: ServiceAccount
+    name: yurt-manager
+    namespace: {{ .Release.Namespace }}
+---
 apiVersion: v1
 kind: Service
 metadata: