Reduce RBAC

Fixes: #47 - I don't think create/delete are needed for namespace, which is user-managed. Patch/update might be needed to manage the status. The same goes for ClusterPullSecret - which is a user-managed resource. Signed-off-by: Alex Ellis (OpenFaaS Ltd) <[email protected]>
alexellis · Nov 18, 2024 · e162934 · e162934
1 parent 77b2b0b
commit e162934
Showing 1 changed file with 2 additions and 6 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -9,13 +9,11 @@ rules:
   resources:
   - namespaces
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
+  - update
+  - patch
 - apiGroups:
   - ""
   resources:
@@ -69,8 +67,6 @@ rules:
   resources:
   - clusterpullsecrets
   verbs:
-  - create
-  - delete
   - get
   - list
   - patch