fix(rbac): reduce permissions to minimum required (#48)

ionos-cloud · Oct 16, 2023 · 0e168e8 · 0e168e8
1 parent 1da8a96
commit 0e168e8
Showing 1 changed file with 31 additions and 5 deletions.
diff --git a/charts/octopinger/templates/cluster_role.yaml b/charts/octopinger/templates/cluster_role.yaml
@@ -6,12 +6,38 @@ metadata:
     {{- include "octopinger.labels" (dict "context" . "component" .Values.controller.name "name" .Values.controller.name) | nindent 4 }}
 rules:
 - apiGroups:
-  - '*'
+  - octopinger.io
   resources:
-  - '*'
+  - octopingers
   verbs:
   - '*'
-- nonResourceURLs:
-  - '*'
+- apiGroups:
+  - ""
+  resources:
+  - pods
   verbs:
-  - '*'
+  - list
+  - get
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - list
+  - get
+  - update
+  - watch
+  - delete
+  - create
+- apiGroups:
+  - apps
+  resources:
+  - daemonsets
+  verbs:
+  - list
+  - get
+  - update
+  - watch
+  - delete
+  - create