From 23b96db049303a152d0044abaec218e0d4d1fb5f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Beatrice=20Dellac=C3=A0?= Date: Wed, 26 Mar 2025 17:54:04 +0100 Subject: [PATCH] fix drone perms --- deploy/drone/drone-rbac.yaml | 32 +++++++++----------------------- 1 file changed, 9 insertions(+), 23 deletions(-) diff --git a/deploy/drone/drone-rbac.yaml b/deploy/drone/drone-rbac.yaml index 7b9f0ad..e5e8390 100644 --- a/deploy/drone/drone-rbac.yaml +++ b/deploy/drone/drone-rbac.yaml @@ -1,39 +1,25 @@ kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata: - namespace: default + namespace: drone name: drone rules: -- apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete -- apiGroups: - - "" - resources: - - pods - - pods/log - verbs: - - get - - create - - delete - - list - - watch - - update - +- apiGroups: [""] + resources: ["secrets"] + verbs: ["create", "delete"] +- apiGroups: [""] + resources: ["pods", "pods/log"] + verbs: ["get", "create", "delete", "list", "watch", "update"] --- kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: drone - namespace: default + namespace: drone subjects: - kind: ServiceAccount name: default - namespace: default + namespace: drone roleRef: kind: Role name: drone