Grant delete on endpoints and configmaps in RBAC. (#749)

'patronictl remove' deletes the cluster configuration (stored either in configmaps or endpoints) and cannot be run from the postgres pod w/o 'delete' on those objects being granted to the pod service account.
This commit is contained in:
Oleksii Kliukin
2018-07-23 20:39:46 +03:00
committed by Alexander Kukushkin
parent f5927bad70
commit 00c2e1c2d0
+4
View File
@@ -145,6 +145,8 @@ rules:
- patch
- update
- watch
# delete is required only for 'patronictl remove'
- delete
- apiGroups:
- ""
resources:
@@ -157,6 +159,8 @@ rules:
- create
- list
- watch
# delete is required only for for 'patronictl remove'
- delete
- apiGroups:
- ""
resources: