Change all clusterroles to have endpoints permissions and reduced events permissions, consolidate where possible

(cherry picked from commit f46a12bccb)
2018-08-01 14:12:12 -04:00
parent 125ed5e73e
commit 7c1944a9b3
2 changed files with 8 additions and 2 deletions
--- a/deploy/auth/clusterrole.yaml
+++ b/deploy/auth/clusterrole.yaml
@@ -14,4 +14,7 @@ rules:
    verbs: ["get", "list", "watch"]
  - apiGroups: [""]
    resources: ["events"]
-    verbs: ["list", "watch", "create", "update", "patch"]
+    verbs: ["create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["endpoints"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]
--- a/deploy/auth/openshift-clusterrole.yaml
+++ b/deploy/auth/openshift-clusterrole.yaml
@@ -14,4 +14,7 @@ rules:
    verbs: ["get", "list", "watch"]
  - apiGroups: [""]
    resources: ["events"]
-    verbs: ["list", "watch", "create", "update", "patch"]
+    verbs: ["create", "update", "patch"]
+  - apiGroups: [""]
+    resources: ["endpoints"]
+    verbs: ["get", "list", "watch", "create", "update", "patch"]