From 00c2e1c2d092c59959d810b4f471f17c7871f4c4 Mon Sep 17 00:00:00 2001
From: Oleksii Kliukin <oleksii.kliukin@zalando.de>
Date: Mon, 23 Jul 2018 19:39:46 +0200
Subject: [PATCH] Grant delete on endpoints and configmaps in RBAC. (#749)

'patronictl remove' deletes the cluster configuration (stored either in configmaps or endpoints) and cannot be run from the postgres pod w/o 'delete' on those objects being granted to the pod service account.
---
 kubernetes/patroni_k8s.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kubernetes/patroni_k8s.yaml b/kubernetes/patroni_k8s.yaml
index 71e82350..3fcadeed 100644
--- a/kubernetes/patroni_k8s.yaml
+++ b/kubernetes/patroni_k8s.yaml
@@ -145,6 +145,8 @@ rules:
   - patch
   - update
   - watch
+  # delete is required only for 'patronictl remove'
+  - delete
 - apiGroups:
   - ""
   resources:
@@ -157,6 +159,8 @@ rules:
   - create
   - list
   - watch
+  # delete is required only for for 'patronictl remove'
+  - delete
 - apiGroups:
   - ""
   resources: