restrict phoenix RBAC to minimum permissions

2026-03-12 07:11:26 +00:00 · 2026-03-12 07:11:26 +00:00 · 29fc00c58f
commit 29fc00c58f
parent b6a37437c4
1 changed files with 8 additions and 6 deletions
--- a/phoenix/rbac.yaml
+++ b/phoenix/rbac.yaml
@ -10,12 +10,14 @@ metadata:
  name: phoenix-role
  namespace: web
 rules:
- apiGroups: [""]
-  resources: ["*"]
-  verbs: ["get", "watch", "list"]
- apiGroups: ["apps"]
-  resources: ["*"]
-  verbs: ["get", "watch", "list"]
+- apiGroups:
+  - "apps"
+  resources:
+  - deployments
+  resourceNames:
+  - phoenix-app
+  verbs:
+  - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding