diff --git a/deploy/helm-chart/kubernetes-replicator/templates/rbac.yaml b/deploy/helm-chart/kubernetes-replicator/templates/rbac.yaml index d7cd6603..dbeb2278 100644 --- a/deploy/helm-chart/kubernetes-replicator/templates/rbac.yaml +++ b/deploy/helm-chart/kubernetes-replicator/templates/rbac.yaml @@ -22,7 +22,7 @@ rules: resources: [ "namespaces" ] verbs: [ "get", "watch", "list" ] - apiGroups: [""] - resources: ["secrets", "configmaps"] + resources: ["secrets", "configmaps", "serviceaccounts"] verbs: ["get", "watch", "list", "create", "update", "patch", "delete"] - apiGroups: ["rbac.authorization.k8s.io"] resources: ["roles", "rolebindings"] @@ -47,4 +47,4 @@ subjects: - kind: ServiceAccount name: {{ include "kubernetes-replicator.fullname" . }} namespace: {{ .Release.Namespace | quote }} -{{- end -}} \ No newline at end of file +{{- end -}} diff --git a/deploy/rbac.yaml b/deploy/rbac.yaml index c62faa40..5b0caa45 100644 --- a/deploy/rbac.yaml +++ b/deploy/rbac.yaml @@ -13,7 +13,7 @@ rules: resources: [ "namespaces" ] verbs: [ "get", "watch", "list" ] - apiGroups: [""] # "" indicates the core API group - resources: ["secrets", "configmaps"] + resources: ["secrets", "configmaps", "serviceaccounts"] verbs: ["get", "watch", "list", "create", "update", "patch", "delete"] - apiGroups: ["rbac.authorization.k8s.io"] resources: ["roles", "rolebindings"]