Restrict role permissions for finalizers

percona · Jul 22, 2023 · 68a685f · 68a685f
1 parent 0c151f4
commit 68a685f
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/charts/pg-operator/templates/role.yaml b/charts/pg-operator/templates/role.yaml
@@ -116,14 +116,19 @@ rules:
   - pgv2.percona.com
   resources:
   - perconapgclusters
-  - perconapgclusters/finalizers
   verbs:
   - create
   - get
   - list
   - patch
   - update
   - watch
+- apiGroups:
+  - pgv2.percona.com
+  resources:
+  - perconapgclusters/finalizers
+  verbs:
+  - update
 - apiGroups:
   - policy
   resources: