Fix rbac for webhooks

Signed-off-by: Aleksandr Zimin <alexandr.zimin@flant.com>
deckhouse · Feb 21, 2024 · 6ed5003 · 6ed5003
1 parent b2f5b85
commit 6ed5003
Showing 1 changed file with 11 additions and 17 deletions.
diff --git a/templates/webhooks/rbac-for-us.yaml b/templates/webhooks/rbac-for-us.yaml
@@ -12,27 +12,21 @@ metadata:
   name: d8:{{ .Chart.Name }}:webhooks
   {{- include "helm_lib_module_labels" (list . (dict "app" "webhooks")) | nindent 2 }}
 rules:
-  - verbs:
-      - get
-      - list
-      - watch
-    apiGroups:
-      - storage.deckhouse.io
-    resources:
-      - drbdstorageclasses
-  - verbs:
-      - get
-      - list
-    apiGroups:
+  - apiGroups:
       - ""
-    resources:
-      - nodes
-  - verbs:
+    verbs:
       - get
-    apiGroups:
-      - ""
     resources:
+      - pods
       - persistentvolumeclaims
+      - persistentvolumes
+  - apiGroups:
+      - storage.k8s.io
+    verbs:
+      - get
+    resources:
+      - storageclasses
+
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1