Merge pull request #58 from FabianKramm/main

build: update rbac permissions in vcluster role

Author: FabianKramm

chart/templates/rbac/clusterrole.yaml

@@ -20,5 +20,5 @@ rules:
     verbs: ["get", "watch", "list"]
   - apiGroups: ["scheduling.k8s.io"]
     resources: ["priorityclasses"]
-    verbs: ["*"]
+    verbs: ["create", "delete", "patch", "update", "get", "list", "watch"]
 {{- end }}

chart/templates/rbac/role.yaml

@@ -11,11 +11,14 @@ metadata:
     heritage: "{{ .Release.Service }}"
 rules:
   - apiGroups: [""]
-    resources: ["configmaps", "secrets", "services", "services/proxy", "pods", "pods/proxy", "pods/attach", "pods/portforward", "pods/exec", "pods/log", "events", "endpoints", "persistentvolumeclaims"]
-    verbs: ["*"]
+    resources: ["configmaps", "secrets", "services", "pods", "pods/attach", "pods/portforward", "pods/exec", "endpoints", "persistentvolumeclaims"]
+    verbs: ["create", "delete", "patch", "update", "get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["events", "pods/log"]
+    verbs: ["get", "list", "watch"]
   - apiGroups: ["networking.k8s.io"]
     resources: ["ingresses"]
-    verbs: ["*"]
+    verbs: ["create", "delete", "patch", "update", "get", "list", "watch"]
   - apiGroups: [""]
     resources: ["namespaces"]
     verbs: ["get", "list", "watch"]