fix: rbac update

alibaba · Jul 26, 2023 · 329434b · 329434b
1 parent 0ff5368
commit 329434b
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 2 deletions.
diff --git a/chart/sreworks-chart/charts/appmanager/templates/operator-deployment.yaml b/chart/sreworks-chart/charts/appmanager/templates/operator-deployment.yaml
@@ -52,5 +52,3 @@ metadata:
   name: appmanager-operator-account
 imagePullSecrets:
 - name: {{ .Values.server.docker.secret }}
-
-
diff --git a/chart/sreworks-chart/charts/appmanager/templates/rbac.yaml b/chart/sreworks-chart/charts/appmanager/templates/rbac.yaml
@@ -254,6 +254,16 @@ rules:
   verbs: ["list","get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: sreworks-base-role
+  namespace: {{ .Release.Namespace }}
+rules:
+- apiGroups: ["*"]
+  resources: ["secrets"]
+  verbs: ["get", "list", "create", "update", "delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: appmanager-operator-leader-election-rolebinding
@@ -328,6 +338,20 @@ roleRef:
   kind: ClusterRole
   name: sreworks-base-role
 subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: sreworks-base-rolebinding
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: sreworks-base-role
+subjects:
 - kind: ServiceAccount
   name: default
   namespace: {{ .Release.Namespace }}
Original file line number	Diff line number	Diff line change
Expand Up		@@ -52,5 +52,3 @@ metadata:
		name: appmanager-operator-account
		imagePullSecrets:
		- name: {{ .Values.server.docker.secret }}