Change configmap permissions to allow update only on specific resource name
@@ -31,11 +31,20 @@ rules:
resources:
- jobs
- verbs:
- - '*'
+ - create
+ apiGroups:
+ - ''
+ resources:
+ - configmaps
+ - verbs:
+ - get
+ - update
+ - delete
apiGroups:
- ''
resources:
- configmaps
+ resourceNames: ["assisted-service-leader-election-helper"]
- verbs:
- '*'
apiGroups:
