Skip to content

Commit 04351ed

Browse files
authored
fix(chart): scope CRD manager permissions to specific resource names (#631)
1 parent ac9a787 commit 04351ed

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

deployments/kai-scheduler/templates/rbac/crd-manager.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,13 @@ metadata:
1212
rules:
1313
- apiGroups: ["apiextensions.k8s.io"]
1414
resources: ["customresourcedefinitions"]
15+
resourceNames:
16+
- configs.kai.scheduler
17+
- schedulingshards.kai.scheduler
18+
- bindrequests.scheduling.run.ai
19+
- podgroups.scheduling.run.ai
20+
- queues.scheduling.run.ai
21+
- topologies.kueue.x-k8s.io
1522
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
1623
---
1724
apiVersion: v1

0 commit comments

Comments
 (0)