浏览代码

Update OLM roles to include resource names

Evan Cordell 6 年之前
父节点
当前提交
15b516add2

+ 1 - 1
roles/olm/files/20-aggregated-edit.clusterrole.yaml

@@ -10,5 +10,5 @@ metadata:
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
 rules:
 - apiGroups: ["operators.coreos.com"]
-  resources: ["*"]
+  resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]

+ 1 - 1
roles/olm/files/21-aggregated-view.clusterrole.yaml

@@ -9,5 +9,5 @@ metadata:
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
 - apiGroups: ["operators.coreos.com"]
-  resources: ["*"]
+  resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions"]
   verbs: ["get", "list", "watch"]