update nm rbac markers

kubesphere · May 27, 2022 · fce1854 · fce1854
1 parent 196337b
commit fce1854
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 25 deletions.
diff --git a/config/bundle.yaml b/config/bundle.yaml
@@ -9969,6 +9969,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources:
@@ -10019,14 +10027,6 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - rolebindings
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
   - '*'
   resources:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -18,6 +18,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources:
@@ -68,11 +76,4 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - rolebindings
-  verbs:
-  - get
-  - list
-  - watch
+helm/templates/roles.yaml
diff --git a/controllers/notificationmanager_controller.go b/controllers/notificationmanager_controller.go
@@ -66,7 +66,7 @@ type NotificationManagerReconciler struct {
 // +kubebuilder:rbac:groups=apps,resources=deployments,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=core,resources=services,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=core,resources=secrets,verbs=get;list;watch
-// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;
+// +kubebuilder:rbac:groups=core,resources=configmaps,verbs=get;list;watch
 
 func (r *NotificationManagerReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) {
 	ctx := context.Background()

diff --git a/helm/templates/clusterroles.yaml b/helm/templates/clusterroles.yaml
@@ -66,14 +66,6 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - rolebindings
-  verbs:
-  - get
-  - list
-  - watch
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1