isolate permissions of e2e stackset-controller to its own namespace t…

…o avoid clashes (#567)
zalando-incubator · Jan 30, 2024 · f2a99bb · f2a99bb
1 parent d0f7901
commit f2a99bb
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/e2e/apply/rbac.yaml b/e2e/apply/rbac.yaml
@@ -5,7 +5,7 @@ metadata:
   name: stackset-controller
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
+kind: Role
 metadata:
   name: stackset-controller
 rules:
@@ -103,14 +103,13 @@ rules:
   - patch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
+kind: RoleBinding
 metadata:
   name: stackset-controller-e2e
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
+  kind: Role
   name: stackset-controller
 subjects:
 - kind: ServiceAccount
   name: stackset-controller
-  namespace: {{{NAMESPACE}}}