diff --git a/deploy/drone/drone-rbac.yaml b/deploy/drone/drone-rbac.yaml index 7b9f0ad..e5e8390 100644 --- a/deploy/drone/drone-rbac.yaml +++ b/deploy/drone/drone-rbac.yaml @@ -1,39 +1,25 @@ kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata: - namespace: default + namespace: drone name: drone rules: -- apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete -- apiGroups: - - "" - resources: - - pods - - pods/log - verbs: - - get - - create - - delete - - list - - watch - - update - +- apiGroups: [""] + resources: ["secrets"] + verbs: ["create", "delete"] +- apiGroups: [""] + resources: ["pods", "pods/log"] + verbs: ["get", "create", "delete", "list", "watch", "update"] --- kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: drone - namespace: default + namespace: drone subjects: - kind: ServiceAccount name: default - namespace: default + namespace: drone roleRef: kind: Role name: drone