From 6ed50031c3afb9c1a033a99999f2bc1a9bbfce90 Mon Sep 17 00:00:00 2001
From: Aleksandr Zimin <alexandr.zimin@flant.com>
Date: Thu, 22 Feb 2024 01:19:06 +0300
Subject: [PATCH] Fix rbac for webhooks

Signed-off-by: Aleksandr Zimin <alexandr.zimin@flant.com>
---
 templates/webhooks/rbac-for-us.yaml | 28 +++++++++++-----------------
 1 file changed, 11 insertions(+), 17 deletions(-)

diff --git a/templates/webhooks/rbac-for-us.yaml b/templates/webhooks/rbac-for-us.yaml
index 04816e9b..7668cde0 100644
--- a/templates/webhooks/rbac-for-us.yaml
+++ b/templates/webhooks/rbac-for-us.yaml
@@ -12,27 +12,21 @@ metadata:
   name: d8:{{ .Chart.Name }}:webhooks
   {{- include "helm_lib_module_labels" (list . (dict "app" "webhooks")) | nindent 2 }}
 rules:
-  - verbs:
-      - get
-      - list
-      - watch
-    apiGroups:
-      - storage.deckhouse.io
-    resources:
-      - drbdstorageclasses
-  - verbs:
-      - get
-      - list
-    apiGroups:
+  - apiGroups:
       - ""
-    resources:
-      - nodes
-  - verbs:
+    verbs:
       - get
-    apiGroups:
-      - ""
     resources:
+      - pods
       - persistentvolumeclaims
+      - persistentvolumes
+  - apiGroups:
+      - storage.k8s.io
+    verbs:
+      - get
+    resources:
+      - storageclasses
+
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1