chore(rbac): add olm-specific ClusterRole

operator-framework · Sep 5, 2018 · 4778f13 · 4778f13
1 parent 7b64206
commit 4778f13
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 4 deletions.
diff --git a/deploy/chart/templates/00-olm-operator.clusterrole.yaml b/deploy/chart/templates/00-olm-operator.clusterrole.yaml
@@ -0,0 +1,10 @@
+apiVersion: {{ .Values.rbacApiVersion }}/v1
+kind: ClusterRole
+metadata:
+  name: system:controller:operator-lifecycle-manager
+rules:
+- apiGroups: ["*"]
+  resources: ["*"]
+  verbs: ["*"]
+- nonResourceURLs: ["*"]
+  verbs: ["*"]
diff --git a/...lates/01-alm-operator.serviceaccount.yaml → ...lates/01-olm-operator.serviceaccount.yaml b/...lates/01-alm-operator.serviceaccount.yaml → ...lates/01-olm-operator.serviceaccount.yaml
@@ -3,5 +3,3 @@ apiVersion: v1
 metadata:
   name: olm-operator-serviceaccount
   namespace: {{ .Values.namespace }}
-imagePullSecrets:
-- name: coreos-pull-secret
diff --git a/...emplates/02-alm-operator.rolebinding.yaml → ...emplates/02-olm-operator.rolebinding.yaml b/...emplates/02-alm-operator.rolebinding.yaml → ...emplates/02-olm-operator.rolebinding.yaml
@@ -3,9 +3,9 @@ kind: ClusterRoleBinding
 metadata:
   name: olm-operator-binding-{{ .Values.namespace }}
 roleRef:
-  apiGroup: rbac.authorization.k8s.io
+  apiGroup: {{ .Values.rbacApiVersion }}
   kind: ClusterRole
-  name: cluster-admin
+  name: system:controller:operator-lifecycle-manager
 subjects:
 - kind: ServiceAccount
   name: olm-operator-serviceaccount