Merge pull request #74 from jsafrane/sync-manila-rbac

Bug 1867735: Sync RBAC rules from Manila operator
openshift · Aug 12, 2020 · 54854e5 · 54854e5
2 parents 083e515 + e6e6ad8
commit 54854e5
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 8 deletions.
diff --git a/assets/csidriveroperators/manila/05_clusterrole.yaml b/assets/csidriveroperators/manila/05_clusterrole.yaml
@@ -11,15 +11,23 @@ rules:
   - securitycontextconstraints
   verbs:
   - use
+
+# The operator needs these config maps:
+# - read/write openshift-manila-csi-driver/cloud-provider-config
+# - read-only kube-system/extension-apiserver-authentication
+# - read/write manila-csi-driver-operator-lock
 - apiGroups:
   - ''
-  resourceNames:
-  - extension-apiserver-authentication
-  - manila-csi-driver-operator-lock
   resources:
   - configmaps
   verbs:
-  - '*'
+  - watch
+  - list
+  - get
+  - create
+  - delete
+  - patch
+  - update
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:

diff --git a/pkg/generated/bindata.go b/pkg/generated/bindata.go