Reduce operator permissions for service accounts (#270)

stashed · Jan 3, 2018 · d8bdd9e · d8bdd9e
1 parent 33e15c1
commit d8bdd9e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/hack/deploy/with-rbac.yaml b/hack/deploy/with-rbac.yaml
@@ -63,8 +63,11 @@ rules:
 - apiGroups: [""]
   resources:
   - pods
-  - serviceaccounts
   verbs: ["get", "create", "list", "delete", "deletecollection"]
+- apiGroups: [""]
+  resources:
+  - serviceaccounts
+  verbs: ["get", "create", "patch", "delete"]
 - apiGroups:
   - rbac.authorization.k8s.io
   resources: