Fix default sa permissions (#45)

* fixed default sa permissions

Makefile

@@ -1,4 +1,4 @@
-VERSION=v0.0.49
+VERSION=v0.0.50
 OUT_DIR=dist
 YEAR?=$(shell date +"%Y")
 

docs/releases/release_notes.md

@@ -8,7 +8,7 @@
 ### Linux
 ```bash
 # download and extract the binary
-curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.49/cf-linux-amd64.tar.gz | tar zx
+curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.50/cf-linux-amd64.tar.gz | tar zx
 
 # move the binary to your $PATH
 mv ./cf-linux-amd64 /usr/local/bin/cf
@@ -20,7 +20,7 @@ cf version
 ### Mac
 ```bash
 # download and extract the binary
-curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.49/cf-darwin-amd64.tar.gz | tar zx
+curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.50/cf-darwin-amd64.tar.gz | tar zx
 
 # move the binary to your $PATH
 mv ./cf-darwin-amd64 /usr/local/bin/cf

manifests/argo-cd/default-rbac.yaml

@@ -1,22 +1,22 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: codefresh-cm-reader
+  name: codefresh-config-reader
 rules:
   - apiGroups: [""]
-    resources: ["configmaps"]
-    resourceNames: ["codefresh-cm"]
+    resources: [ "configmaps", "secrets" ]
+    resourceNames: [ "codefresh-cm", "codefresh-token" ]
     verbs: ["get"]
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: codefresh-cm-reader
+  name: codefresh-config-reader
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: codefresh-cm-reader
+  name: codefresh-config-reader
 subjects:
   - kind: ServiceAccount
     name: default

manifests/runtime.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: "{{ namespace }}"
 spec:
   defVersion: 1.0.0
-  version: 0.0.49
+  version: 0.0.50
   bootstrapSpecifier: github.com/codefresh-io/cli-v2/manifests/argo-cd
   components:
     - name: events