Limit access to configmaps

2025-07-23 03:41:45 +00:00 · 2018-06-08 18:02:37 +02:00 · 2018-06-08 18:02:37 +02:00 · f8fa60e9ea
commit f8fa60e9ea
parent c70b554af9
1 changed files with 5 additions and 1 deletions
--- a/cluster/addons/rbac/cluster-autoscaler/cluster-autoscaler-rbac.yaml
+++ b/cluster/addons/rbac/cluster-autoscaler/cluster-autoscaler-rbac.yaml
@ -45,7 +45,11 @@ rules:
    verbs: ["create", "update", "patch"]
  - apiGroups: [""]
    resources: ["configmaps"]
-    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"]
+    verbs: ["create"]
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    resourceNames: ["cluster-autoscaler-status"]
+    verbs: ["get", "update", "patch", "delete"]
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1