fix(secret-operator): rbac missing (#101)

zncdatadev · Dec 30, 2024 · 2023cbe · 2023cbe
1 parent 68cfa01
commit 2023cbe
Showing 1 changed file with 2 additions and 65 deletions.
diff --git a/charts/secret-operator/templates/clusterrole.yaml b/charts/secret-operator/templates/clusterrole.yaml
@@ -10,6 +10,8 @@ rules:
   - ""
   resources:
   - events
+  - pods
+  - secrets
   verbs:
   - create
   - get
@@ -21,13 +23,6 @@ rules:
   - ""
   resources:
   - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
   - persistentvolumeclaims
   verbs:
   - get
@@ -43,27 +38,6 @@ rules:
   - get
   - list
   - patch
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - create
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-  - get
-  - list
-  - patch
   - update
   - watch
 - apiGroups:
@@ -92,47 +66,10 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - secrets.kubedoop.dev
-  resources:
-  - secretcsis
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - secrets.kubedoop.dev
-  resources:
-  - secretcsis/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - secrets.kubedoop.dev
-  resources:
-  - secretcsis/status
-  verbs:
-  - get
-  - patch
-  - update
 - apiGroups:
   - storage.k8s.io
   resources:
   - csidrivers
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
   - storageclasses
   verbs:
   - get