Reduce sablier RBAC permission

2024-10-25 09:56:21 +02:00 · 2024-10-25 09:56:21 +02:00 · c99b0c58ad
commit c99b0c58ad
parent 77a7accd51
1 changed files with 9 additions and 1 deletions
--- a/templates/traefik-ondemand-plugin.yml.j2
+++ b/templates/traefik-ondemand-plugin.yml.j2
@ -67,8 +67,16 @@ rules:
      - ""
    resources:
      - deployments
-      - deployments/scale
      - statefulsets
+    verbs:
+      - get     # Retrieve info about specific dep
+      - list    # Events
+      - watch   # Events
+  - apiGroups:
+      - apps
+      - ""
+    resources:
+      - deployments/scale
      - statefulsets/scale
    verbs:
      - patch   # Scale up and down