changed secret cluster role to namespaced role

snapp-incubator · Aug 22, 2023 · 10dab41 · 10dab41
1 parent 40ac4ba
commit 10dab41
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -97,6 +97,14 @@ rules:
   - get
   - patch
   - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  creationTimestamp: null
+  name: manager-role
+  namespace: cerberus-operator-system
+rules:
 - apiGroups:
   - v1
   resources:

diff --git a/pkg/auth/authenticator.go b/pkg/auth/authenticator.go
@@ -49,7 +49,7 @@ const (
 //+kubebuilder:rbac:groups=cerberus.snappcloud.io,resources=webservices/status,verbs=get;
 //+kubebuilder:rbac:groups=cerberus.snappcloud.io,resources=webserviceaccountbindings,verbs=get;list;watch;
 //+kubebuilder:rbac:groups=cerberus.snappcloud.io,resources=webserviceaccountbindings/status,verbs=get;
-//+kubebuilder:rbac:groups=v1,resources=secrets,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=v1,namespace=cerberus-operator-system,resources=secrets,verbs=get;list;watch;create;update;patch;delete
 
 func (a *Authenticator) UpdateCache(ctx context.Context) error {
 	a.updateLock.Lock()