From 4f021d65c7d6049206195fa7a3aadab23b0a9747 Mon Sep 17 00:00:00 2001
From: Mohsen <mohsen0@users.noreply.github.com>
Date: Tue, 15 Mar 2022 13:29:11 +0000
Subject: [PATCH] change to least privileged role rules for leader-election
 (#982)

---
 .../leader-role.yml                                  | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/spring-cloud-kubernetes-examples/kubernetes-leader-election-example/leader-role.yml b/spring-cloud-kubernetes-examples/kubernetes-leader-election-example/leader-role.yml
index 968fe263..c3d0ebea 100644
--- a/spring-cloud-kubernetes-examples/kubernetes-leader-election-example/leader-role.yml
+++ b/spring-cloud-kubernetes-examples/kubernetes-leader-election-example/leader-role.yml
@@ -10,6 +10,16 @@ rules:
   - ""
   resources:
   - pods
+  verbs:
+  - watch
+  - get
+- apiGroups:
+  - ""
+  resources:
   - configmaps
   verbs:
-  - '*'
+  - watch
+  - get
+  - update
+  # resourceNames:
+  #   - <config-map name>