adrien/ansible-role-k8s-traefik
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Reduce sablier RBAC permission

Browse source
This commit is contained in:
Adrien Reslinger 2024-10-25 09:56:21 +02:00
parent 77a7accd51
commit c99b0c58ad
Signed by: adrien
GPG key ID: DA7B27055C66D6DE
1 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
templates/traefik-ondemand-plugin.yml.j2
View file

@ -67,8 +67,16 @@ rules:
- "" - ""
resources: resources:
- deployments - deployments
- deployments/scale
- statefulsets - statefulsets
verbs:
- get # Retrieve info about specific dep
- list # Events
- watch # Events
- apiGroups:
- apps
- ""
resources:
- deployments/scale
- statefulsets/scale - statefulsets/scale
verbs: verbs:
- patch # Scale up and down - patch # Scale up and down