rbac: allow operator to manage events

openshift · Jun 6, 2019 · abc99f9 · abc99f9
1 parent 695c236
commit abc99f9
Showing 1 changed file with 3 additions and 7 deletions.
diff --git a/manifests/00-cluster-role.yaml b/manifests/00-cluster-role.yaml
@@ -1,4 +1,6 @@
 # Cluster role for the operator itself.
+# TODO: A lot of these should be replaced by roles in the namespaces for which
+# the operator actually needs access.
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -14,15 +16,9 @@ rules:
   - services
   - secrets
   - pods
-  verbs:
-  - "*"
-
-- apiGroups:
-  - ""
-  resources:
   - events
   verbs:
-  - create
+  - "*"
 
 - apiGroups:
   - apps