reduce namespaces roles to only list

andrewazores · andrewazores · commit 66e5cf65e5a2 · 2025-05-09T10:51:16.000-04:00
diff --git a/charts/cryostat/templates/discovery_clusterrole.yaml b/charts/cryostat/templates/discovery_clusterrole.yaml
@@ -9,9 +9,14 @@ rules:
 - apiGroups:
   - ""
   resources:
-  - endpoints
   - namespaces
   verbs:
+  - list
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
   - get
   - list
   - watch
diff --git a/charts/cryostat/tests/discovery_clusterrole_test.yaml b/charts/cryostat/tests/discovery_clusterrole_test.yaml
@@ -59,9 +59,14 @@ tests:
             - apiGroups:
               - ""
               resources:
-              - endpoints
               - namespaces
               verbs:
+              - list
+            - apiGroups:
+              - ""
+              resources:
+              - endpoints
+              verbs:
               - get
               - list
               - watch
