Merge 1d36f45 into 5eca507

k8snetworkplumbingwg · Nov 1, 2018 · e686cd6 · e686cd6
2 parents 5eca507 + 1d36f45
commit e686cd6
Showing 1 changed file with 13 additions and 10 deletions.
diff --git a/images/multus-daemonset.yml b/images/multus-daemonset.yml
@@ -26,16 +26,19 @@ apiVersion: rbac.authorization.k8s.io/v1beta1
 metadata:
   name: multus
 rules:
-- apiGroups:
-  - '*'
-  resources:
-  - '*'
-  verbs:
-  - '*'
-- nonResourceURLs:
-  - '*'
-  verbs:
-  - '*'
+  - apiGroups: ["k8s.cni.cncf.io"]
+    resources:
+      - '*'
+    verbs:
+      - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/status
+    verbs:
+      - get
+      - update
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1