Merge pull request #267 from technoplayer/master

In Helm chart, replaces * verbs with specific verbs.
spotahome · Aug 27, 2020 · aae8c19 · aae8c19
2 parents 8adc0a7 + 6dd4ddd
commit aae8c19
Showing 1 changed file with 35 additions and 5 deletions.
diff --git a/charts/redisoperator/templates/rbac.yaml b/charts/redisoperator/templates/rbac.yaml
@@ -21,13 +21,25 @@ rules:
       - redisfailovers
       - redisfailovers/finalizers
     verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - apiextensions.k8s.io
     resources:
       - customresourcedefinitions
     verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - ""
     resources:
@@ -37,7 +49,13 @@ rules:
       - events
       - configmaps
     verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - ""
     resources:
@@ -50,13 +68,25 @@ rules:
       - deployments
       - statefulsets
     verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - policy
     resources:
       - poddisruptionbudgets
     verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}