Merge pull request #287 from rifelpet/role-restriction

Restrict ClusterRole to readonly IAMIdentityMapping access
kubernetes-sigs · Feb 10, 2020 · aaeee87 · aaeee87
2 parents a2ca769 + cebc22a
commit aaeee87
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/deploy/example.yaml b/deploy/example.yaml
@@ -27,9 +27,18 @@ rules:
 - apiGroups:
   - iamauthenticator.k8s.aws
   resources:
-  - "*"
+  - iamidentitymappings
   verbs:
-  - "*"
+  - get
+  - list
+  - watch
+- apiGroups:
+  - iamauthenticator.k8s.aws
+  resources:
+  - iamidentitymappings/status
+  verbs:
+  - patch
+  - update
 - apiGroups:
   - ""
   resources: