commit efce51ff114b84d036aed12e8fc8b15e4286a5da
author Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local> Tue Dec 12 18:25:48 2023 +0400
committer Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local> Tue Dec 12 18:25:48 2023 +0400
tree a5edfe525d2b3f97251fa10a4b9b3760a8f8b54f
parent 378ea88919ca0aa15a1b3d12ece501bd3f6aee2e

installer-env: full permissions

charts/env-manager/templates/install.yaml

diff --git a/charts/env-manager/templates/install.yaml b/charts/env-manager/templates/install.yaml
index 37198fc..dd14caf 100644
--- a/charts/env-manager/templates/install.yaml
+++ b/charts/env-manager/templates/install.yaml
@@ -2,13 +2,19 @@
 kind: ClusterRole
 metadata:
   name: {{ .Values.clusterRoleName }}
-rules:
+rules: # TODO(gio): restrict to ns create and dnszone get
 - apiGroups:
-  - ""
+  - "*"
   resources:
-  - namespaces
+  - "*"
   verbs:
-  - create
+  - "*"
+# - apiGroups:
+#   - ""
+#   resources:
+#   - namespaces
+#   verbs:
+#   - create
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding