Skip to content
Snippets Groups Projects
Commit 17fd367a authored by Stano Bocinec's avatar Stano Bocinec Committed by Derek Su
Browse files

RBAC - do not use wildcard verb for PVC grant

parent 6ddfd11f
No related branches found
No related tags found
No related merge requests found
...@@ -14,7 +14,7 @@ rules: ...@@ -14,7 +14,7 @@ rules:
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumes"] resources: ["persistentvolumes"]
verbs: ["*"] verbs: ["get", "list", "watch", "create", "patch", "update", "delete"]
- apiGroups: [""] - apiGroups: [""]
resources: ["events"] resources: ["events"]
verbs: ["create", "patch"] verbs: ["create", "patch"]
......
...@@ -35,7 +35,7 @@ rules: ...@@ -35,7 +35,7 @@ rules:
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumes"] resources: ["persistentvolumes"]
verbs: ["*"] verbs: ["get", "list", "watch", "create", "patch", "update", "delete"]
- apiGroups: [""] - apiGroups: [""]
resources: ["events"] resources: ["events"]
verbs: ["create", "patch"] verbs: ["create", "patch"]
......
...@@ -35,7 +35,7 @@ rules: ...@@ -35,7 +35,7 @@ rules:
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumes"] resources: ["persistentvolumes"]
verbs: ["*"] verbs: ["get", "list", "watch", "create", "patch", "update", "delete"]
- apiGroups: [""] - apiGroups: [""]
resources: ["events"] resources: ["events"]
verbs: ["create", "patch"] verbs: ["create", "patch"]
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment