fix clusterrole in helm chart

This commit is contained in:
Felix Kunde 2020-12-16 11:52:03 +01:00
parent dbf1a7254b
commit ab8f7ddc16
1 changed files with 29 additions and 11 deletions

View File

@ -44,13 +44,6 @@ rules:
- get - get
- patch - patch
- update - update
# to read configuration from ConfigMaps
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
# to send events to the CRs # to send events to the CRs
- apiGroups: - apiGroups:
- "" - ""
@ -64,14 +57,11 @@ rules:
- update - update
- watch - watch
# to manage endpoints/configmaps which are also used by Patroni # to manage endpoints/configmaps which are also used by Patroni
{{- if toString .Values.configGeneral.kubernetes_use_configmaps | eq "true" }}
- apiGroups: - apiGroups:
- "" - ""
resources: resources:
{{- if toString .Values.configGeneral.kubernetes_use_configmaps | eq "true" }}
- configmaps - configmaps
{{- else }}
- endpoints
{{- end }}
verbs: verbs:
- create - create
- delete - delete
@ -81,6 +71,34 @@ rules:
- patch - patch
- update - update
- watch - watch
- apiGroups:
- ""
resources:
- endpoints
verbs:
- get
{{- else }}
# to read configuration from ConfigMaps
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- apiGroups:
- ""
resources:
- endpoints
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
{{- end }}
# to CRUD secrets for database access # to CRUD secrets for database access
- apiGroups: - apiGroups:
- "" - ""