Skip to content

Commit d65d4a1

Browse files
MHBauerpmorie
authored andcommitted
rbac targets needed to be renamed as well (#1161)
- 2238f51af901fe6bb722f108ce7c073b959333c0
1 parent 590f6f2 commit d65d4a1

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

charts/catalog/templates/rbac.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ items:
7777
- apiGroups: [""]
7878
resources: ["events"]
7979
verbs: ["create","patch","update"]
80-
# TODO: do not grant global access, limit to particular secrets referenced from bindings
80+
# TODO: do not grant global access, limit to particular secrets referenced from serviceinstancecredentials
8181
- apiGroups: [""]
8282
resources: ["secrets"]
8383
verbs: ["get","create","delete"]
@@ -89,10 +89,10 @@ items:
8989
resources: ["serviceclasses"]
9090
verbs: ["get","list","watch","create","patch","update","delete"]
9191
- apiGroups: ["servicecatalog.k8s.io"]
92-
resources: ["bindings","brokers","instances"]
92+
resources: ["servicebrokers","serviceinstances","serviceinstancecredentials"]
9393
verbs: ["get","list","watch"]
9494
- apiGroups: ["servicecatalog.k8s.io"]
95-
resources: ["bindings/status","brokers/status","instances/status"]
95+
resources: ["servicebrokers/status","serviceinstances/status","serviceinstancecredentials/status"]
9696
verbs: ["update"]
9797
# give the controller-manager service account access to whats defined in its role.
9898
- apiVersion: rbac.authorization.k8s.io/v1beta1

0 commit comments

Comments
 (0)