set minimal required permissions for operator service account

Author: adam-sandor

samples/mysql-schema/k8s/deployment.yaml

@@ -45,6 +45,25 @@ spec:
           initialDelaySeconds: 30
           timeoutSeconds: 1
 ---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  name: mysql-schema-operator
+rules:
+- apiGroups:
+  - mysql.sample.javaoperatorsdk
+  resources:
+  - schemas
+  verbs:
+  - "*"
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - "get"
+  - "list"
+---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -61,5 +80,5 @@ subjects:
   namespace: mysql-schema-operator
 roleRef:
   kind: ClusterRole
-  name: cluster-admin
+  name: mysql-schema-operator
   apiGroup: ""