mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-30 19:35:06 +00:00
Code Activity

fix: harden rbac permissions (#7638)

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2023-06-26 05:57:24 +02:00 • committed by GitHub
parent 955570b0c5
commit 9636eb7e3a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 28 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
charts/kyverno/templates/background-controller/role.yaml
View file

@ -25,9 +25,16 @@ rules:
- leases
verbs:
- create
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- delete
- get
- patch
- update
resourceNames:
- kyverno-background-controller
{{- end -}}
{{- end -}}

7
charts/kyverno/templates/reports-controller/role.yaml
View file

@ -25,9 +25,16 @@ rules:
- leases
verbs:
- create
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- delete
- get
- patch
- update
resourceNames:
- kyverno-reports-controller
{{- end -}}
{{- end -}}

14
config/install-latest-testing.yaml
View file

@ -38372,10 +38372,17 @@ rules:
- leases
verbs:
- create
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- delete
- get
- patch
- update
resourceNames:
- kyverno-background-controller
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
@ -38463,10 +38470,17 @@ rules:
- leases
verbs:
- create
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- delete
- get
- patch
- update
resourceNames:
- kyverno-reports-controller
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1