From d5927d76fba258a778a3b18e33a630e3e1df2a40 Mon Sep 17 00:00:00 2001 From: daniel-codefresh <69415974+daniel-codefresh@users.noreply.github.com> Date: Wed, 4 Aug 2021 16:23:29 +0300 Subject: [PATCH] Fix default sa permissions (#45) * fixed default sa permissions --- Makefile | 2 +- docs/releases/release_notes.md | 4 ++-- manifests/argo-cd/default-rbac.yaml | 10 +++++----- manifests/runtime.yaml | 2 +- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/Makefile b/Makefile index 83ea4ec9e..acd9a43be 100644 --- a/Makefile +++ b/Makefile @@ -1,4 +1,4 @@ -VERSION=v0.0.49 +VERSION=v0.0.50 OUT_DIR=dist YEAR?=$(shell date +"%Y") diff --git a/docs/releases/release_notes.md b/docs/releases/release_notes.md index 2d1992340..0a7d85651 100644 --- a/docs/releases/release_notes.md +++ b/docs/releases/release_notes.md @@ -8,7 +8,7 @@ ### Linux ```bash # download and extract the binary -curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.49/cf-linux-amd64.tar.gz | tar zx +curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.50/cf-linux-amd64.tar.gz | tar zx # move the binary to your $PATH mv ./cf-linux-amd64 /usr/local/bin/cf @@ -20,7 +20,7 @@ cf version ### Mac ```bash # download and extract the binary -curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.49/cf-darwin-amd64.tar.gz | tar zx +curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.50/cf-darwin-amd64.tar.gz | tar zx # move the binary to your $PATH mv ./cf-darwin-amd64 /usr/local/bin/cf diff --git a/manifests/argo-cd/default-rbac.yaml b/manifests/argo-cd/default-rbac.yaml index fac753869..3658b9d7a 100644 --- a/manifests/argo-cd/default-rbac.yaml +++ b/manifests/argo-cd/default-rbac.yaml @@ -1,22 +1,22 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: - name: codefresh-cm-reader + name: codefresh-config-reader rules: - apiGroups: [""] - resources: ["configmaps"] - resourceNames: ["codefresh-cm"] + resources: [ "configmaps", "secrets" ] + resourceNames: [ "codefresh-cm", "codefresh-token" ] verbs: ["get"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: - name: codefresh-cm-reader + name: codefresh-config-reader roleRef: apiGroup: rbac.authorization.k8s.io kind: Role - name: codefresh-cm-reader + name: codefresh-config-reader subjects: - kind: ServiceAccount name: default diff --git a/manifests/runtime.yaml b/manifests/runtime.yaml index 11a31381a..291953587 100644 --- a/manifests/runtime.yaml +++ b/manifests/runtime.yaml @@ -5,7 +5,7 @@ metadata: namespace: "{{ namespace }}" spec: defVersion: 1.0.0 - version: 0.0.49 + version: 0.0.50 bootstrapSpecifier: github.com/codefresh-io/cli-v2/manifests/argo-cd components: - name: events