Fixing rbac issues reported in #64

Signed-off-by: Joe Peacock <joe_peacock@intuit.com>
istio-ecosystem · Feb 12, 2020 · 02f75ad · 02f75ad
1 parent 31e6495
commit 02f75ad
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 2 deletions.
diff --git a/install/admiral/base/role_bindings.yaml b/install/admiral/base/role_bindings.yaml
@@ -29,3 +29,17 @@ subjects:
     namespace: admiral
 
 ---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: admiral-configmap-role-binding
+  namespace: admiral
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: admiral-configmap-role
+subjects:
+  - kind: ServiceAccount
+    name: admiral
+    namespace: admiral
diff --git a/install/admiral/base/roles.yaml b/install/admiral/base/roles.yaml
@@ -18,4 +18,16 @@ metadata:
 rules:
   - apiGroups: [""]
     resources: ["secrets"]
-    verbs: ["get", "watch", "list"]
+    verbs: ["get", "watch", "list"]
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: admiral-configmap-role
+  namespace: admiral
+rules:
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["get", "update", "create"]
diff --git a/install/admiral/base/service_accounts.yaml b/install/admiral/base/service_accounts.yaml
@@ -1,5 +1,4 @@
 
-
 ---
 apiVersion: v1
 kind: ServiceAccount