change to least privileged role rules for leader-election (#982)

2022-03-15 13:29:11 +00:00
parent 79fd04cf00
commit 4f021d65c7
1 changed files with 11 additions and 1 deletions
--- a/spring-cloud-kubernetes-examples/kubernetes-leader-election-example/leader-role.yml
+++ b/spring-cloud-kubernetes-examples/kubernetes-leader-election-example/leader-role.yml
@@ -10,6 +10,16 @@ rules:
  - ""
  resources:
  - pods
+  verbs:
+  - watch
+  - get
+- apiGroups:
+  - ""
+  resources:
  - configmaps
  verbs:
-  - '*'
+  - watch
+  - get
+  - update
+  # resourceNames:
+  #   - <config-map name>