Skip to content

Commit

Permalink
Changing permissions of UCP - removing unused permissions (#8080)
Browse files Browse the repository at this point in the history
# Description
Changing permissions of UCP - removing unused permissions.

## Type of change
- This pull request is a minor refactor, code cleanup, test improvement,
or other maintenance task and doesn't change the functionality of Radius
(issue link optional).
Fixes: #8082 

## Contributor checklist
Please verify that the PR meets the following requirements, where
applicable:

- [ ] An overview of proposed schema changes is included in a linked
GitHub issue.
- [ ] A design document PR is created in the [design-notes
repository](https://github.com/radius-project/design-notes/), if new
APIs are being introduced.
- [ ] If applicable, design document has been reviewed and approved by
Radius maintainers/approvers.
- [ ] A PR for the [samples
repository](https://github.com/radius-project/samples) is created, if
existing samples are affected by the changes in this PR.
- [ ] A PR for the [documentation
repository](https://github.com/radius-project/docs) is created, if the
changes in this PR affect the documentation or any user facing updates
are made.
- [ ] A PR for the [recipes
repository](https://github.com/radius-project/recipes) is created, if
existing recipes are affected by the changes in this PR.

---------

Signed-off-by: ytimocin <[email protected]>
  • Loading branch information
ytimocin authored Dec 13, 2024
1 parent ae40560 commit 3383692
Showing 1 changed file with 35 additions and 49 deletions.
84 changes: 35 additions & 49 deletions deploy/Chart/templates/ucp/rbac.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,52 +6,38 @@ metadata:
app.kubernetes.io/name: ucp
app.kubernetes.io/part-of: radius
rules:
- apiGroups:
- ""
resources:
- configmaps
- secrets
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- deployments
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ucp.dev
resources:
- resources
- queuemessages
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- api.ucp.dev
resources:
- '*'
verbs:
- '*'
- apiGroups:
- ""
resources:
- secrets
verbs:
- create
- delete
- get
- update

- apiGroups:
- ucp.dev
resources:
- resources
- queuemessages
verbs:
- create
- delete
- get
- list
- update

- apiGroups:
- api.ucp.dev
resources:
- "*"
verbs:
- create
- delete
- get
- list
- update
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
Expand All @@ -65,6 +51,6 @@ roleRef:
kind: ClusterRole
name: ucp
subjects:
- kind: ServiceAccount
name: ucp
namespace: {{ .Release.Namespace }}
- kind: ServiceAccount
name: ucp
namespace: {{ .Release.Namespace }}

0 comments on commit 3383692

Please sign in to comment.