RBAC: Don't bind powerful permissions to default SA
The ClusterRoleBinding `openebs-maya-operator` binds very powerful
ClusterRole `openebs-maya-operator` to `default` service account in
`default` namespace. This commit removes the service account from the
list of `subjects`.
@@ -89,9 +89,6 @@ subjects:
- kind: ServiceAccount
name: openebs-maya-operator
namespace: openebs
-- kind: User
- name: system:serviceaccount:default:default
- apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
name: openebs-maya-operator
