diff --git a/charts/sn-platform-slim/templates/function-worker/function-worker-role-binding.yaml b/charts/sn-platform-slim/templates/function-worker/function-worker-role-binding.yaml index 7dcbb099b..c6f902336 100644 --- a/charts/sn-platform-slim/templates/function-worker/function-worker-role-binding.yaml +++ b/charts/sn-platform-slim/templates/function-worker/function-worker-role-binding.yaml @@ -50,7 +50,11 @@ rules: {{- if .Values.broker.functionmesh.enabled}} - apiGroups: ["compute.functionmesh.io"] resources: - - '*' + - backendconfigs + - functionmeshes + - functions + - sources + - sinks verbs: - list - watch diff --git a/charts/sn-platform-slim/templates/toolset/jwt-secret-init-job-service-account.yaml b/charts/sn-platform-slim/templates/toolset/jwt-secret-init-job-service-account.yaml index 4a6fbd56c..79ae73863 100644 --- a/charts/sn-platform-slim/templates/toolset/jwt-secret-init-job-service-account.yaml +++ b/charts/sn-platform-slim/templates/toolset/jwt-secret-init-job-service-account.yaml @@ -20,7 +20,7 @@ metadata: rules: - apiGroups: [""] resources: ["secrets"] - verbs: ["*"] + verbs: ["list","watch" ,"get" ,"update" ,"create" ,"delete" ,"patch"] --- kind: RoleBinding diff --git a/charts/sn-platform/templates/function-worker/function-worker-role-binding.yaml b/charts/sn-platform/templates/function-worker/function-worker-role-binding.yaml index 7dcbb099b..c6f902336 100644 --- a/charts/sn-platform/templates/function-worker/function-worker-role-binding.yaml +++ b/charts/sn-platform/templates/function-worker/function-worker-role-binding.yaml @@ -50,7 +50,11 @@ rules: {{- if .Values.broker.functionmesh.enabled}} - apiGroups: ["compute.functionmesh.io"] resources: - - '*' + - backendconfigs + - functionmeshes + - functions + - sources + - sinks verbs: - list - watch diff --git a/charts/sn-platform/templates/toolset/jwt-secret-init-job-service-account.yaml b/charts/sn-platform/templates/toolset/jwt-secret-init-job-service-account.yaml index 4a6fbd56c..79ae73863 100644 --- a/charts/sn-platform/templates/toolset/jwt-secret-init-job-service-account.yaml +++ b/charts/sn-platform/templates/toolset/jwt-secret-init-job-service-account.yaml @@ -20,7 +20,7 @@ metadata: rules: - apiGroups: [""] resources: ["secrets"] - verbs: ["*"] + verbs: ["list","watch" ,"get" ,"update" ,"create" ,"delete" ,"patch"] --- kind: RoleBinding