Changing permissions of UCP - removing unused permissions

Signed-off-by: ytimocin <[email protected]>
radius-project · Nov 24, 2024 · 4957ab2 · 4957ab2
1 parent 9650406
commit 4957ab2
Showing 1 changed file with 27 additions and 62 deletions.
diff --git a/deploy/Chart/templates/ucp/rbac.yaml b/deploy/Chart/templates/ucp/rbac.yaml
@@ -6,65 +6,30 @@ metadata:
     app.kubernetes.io/name: ucp
     app.kubernetes.io/part-of: radius
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  - secrets
-  - services
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - apps
-  resources:
-  - deployments
-  - statefulsets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - ucp.dev
-  resources:
-  - resources
-  - queuemessages
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - api.ucp.dev
-  resources:
-  - '*'
-  verbs:
-  - '*'
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: ucp
-  labels:
-    app.kubernetes.io/name: ucp
-    app.kubernetes.io/part-of: radius
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: ucp
-subjects:
-- kind: ServiceAccount
-  name: ucp
-  namespace: {{ .Release.Namespace }}
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - create
+      - delete
+      - get
+      - update
+
+  - apiGroups:
+      - ucp.dev
+    resources:
+      - resources
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - update
+
+  - apiGroups:
+      - ucp.dev
+    resources:
+      - queuemessages
+    verbs:
+      - create