mirror of
https://github.com/fluxcd/flux2.git
synced 2025-08-06 09:00:10 +08:00
Merge pull request #5332 from fluxcd/rfc-0010
[RFC-0010] Add RBAC for creating service account tokens
This commit is contained in:
@ -69,6 +69,13 @@ rules:
|
|||||||
- update
|
- update
|
||||||
- patch
|
- patch
|
||||||
- delete
|
- delete
|
||||||
|
# required for object-level workload identity
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- serviceaccounts/token
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
# required for flow control
|
# required for flow control
|
||||||
- nonResourceURLs:
|
- nonResourceURLs:
|
||||||
- /livez/ping
|
- /livez/ping
|
||||||
|
Reference in New Issue
Block a user