Minimize webhook privileges to core.kubefed.k8s.io
@@ -96,7 +96,9 @@ rules:
- apiGroups:
- core.kubefed.k8s.io
resources:
- - '*'
+ - federatedtypeconfigs
+ - kubefedclusters
+ - kubefedconfigs
verbs:
- get
- watch
