Align bot role with argocd-notifications project
In the recent #389 review, the role used by the bot added a policy allowing it to broadly read secrets and configmaps, however this should align with the changes in https://github.com/argoproj-labs/argocd-notifications/pull/95 where limited access to the specific secret it needs should be granted.
This commit is contained in:
parent
7d5d20f615
commit
8619686625
1 changed files with 2 additions and 1 deletions
|
@ -17,9 +17,10 @@ rules:
|
||||||
- patch
|
- patch
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- ""
|
- ""
|
||||||
|
resourceNames:
|
||||||
|
- argocd-notifications-secret
|
||||||
resources:
|
resources:
|
||||||
- secrets
|
- secrets
|
||||||
- configmaps
|
|
||||||
verbs:
|
verbs:
|
||||||
- get
|
- get
|
||||||
- list
|
- list
|
||||||
|
|
Loading…
Reference in a new issue