Update 02-rbac.yaml

update rbac to run in container
k8snetworkplumbingwg · Feb 7, 2025 · e8ec90c · e8ec90c
1 parent 75c3315
commit e8ec90c
Showing 1 changed file with 19 additions and 13 deletions.
diff --git a/deploy/02-rbac.yaml b/deploy/02-rbac.yaml
@@ -1,22 +1,28 @@
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
+kind: Role
 metadata:
-  name: linuxptp-daemon
+  namespace: openshift-ptp
+  name: linuxptp-daemon-role
 rules:
-- apiGroups: ["ptp.openshift.io"]
-  resources: ["*"]
-  verbs: ["*"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["get", "list", "watch","patch"]
+  - apiGroups: [ "" ]
+    resources: [ "configmaps" ]
+    verbs: [ "get", "list", "watch","patch", "update"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
+kind: RoleBinding
 metadata:
-  name: linuxptp-daemon
+  name: linuxptp-daemon-rolebinding
+  namespace: openshift-ptp
+subjects:
+  - kind: ServiceAccount
+    name: linuxptp-daemon
+    namespace: openshift-ptp
 roleRef:
-  kind: ClusterRole
-  name: linuxptp-daemon
+  kind: Role
+  name: linuxptp-daemon-role
   apiGroup: rbac.authorization.k8s.io
-subjects:
-- kind: ServiceAccount
-  name: linuxptp-daemon
-  namespace: openshift-ptp
+