Rename the ClusterRoleBindings, as they no longer give admin privileges.
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
+
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: eventing-controller-admin
+ name: eventing-controller
subjects:
- kind: ServiceAccount
name: eventing-controller
@@ -23,11 +24,13 @@ roleRef:
kind: ClusterRole
name: knative-eventing-controller
apiGroup: rbac.authorization.k8s.io
+
---
+
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: eventing-webhook-admin
+ name: eventing-webhook
subjects:
- kind: ServiceAccount
name: eventing-webhook
