From c99b0c58ad7ceaed0895031b6ad8257f35b6d97c Mon Sep 17 00:00:00 2001
From: Adrien Reslinger <adrien@reslinger.net>
Date: Fri, 25 Oct 2024 09:56:21 +0200
Subject: [PATCH] Reduce sablier RBAC permission

---
 templates/traefik-ondemand-plugin.yml.j2 | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/templates/traefik-ondemand-plugin.yml.j2 b/templates/traefik-ondemand-plugin.yml.j2
index 6267efa..b1de45a 100644
--- a/templates/traefik-ondemand-plugin.yml.j2
+++ b/templates/traefik-ondemand-plugin.yml.j2
@@ -67,8 +67,16 @@ rules:
       - ""
     resources:
       - deployments
-      - deployments/scale
       - statefulsets
+    verbs:
+      - get     # Retrieve info about specific dep
+      - list    # Events
+      - watch   # Events
+  - apiGroups:
+      - apps
+      - ""
+    resources:
+      - deployments/scale
       - statefulsets/scale
     verbs:
       - patch   # Scale up and down