fix

2024-01-19 17:05:39 +01:00
parent 46c78fb31a
commit ddf4bb9ccb
2 changed files with 31 additions and 31 deletions
--- a/apps/gramo/rbac.tf
+++ b/apps/gramo/rbac.tf
@@ -77,15 +77,15 @@ resource "kubectl_manifest" "gramo_clusterrole" {
      labels: ${jsonencode(local.common-labels)}
    rules:
    - apiGroups: [""]
-      resources: ["namespaces","customresourcedefinitions"]
-      verbs: ["get","list"]
-    - apiGroups: ["apiextensions.k8s.io"]
-      resources: ["customresourcedefinitions"]
+      resources: ["namespaces"]
      resourceNames: ${jsonencode(local.sorted-namespaces)}
      verbs: ["get"]
    - apiGroups: [""]
      resources: ["namespaces"]
      verbs: ["list"]
+    - apiGroups: ["apiextensions.k8s.io"]
+      resources: ["customresourcedefinitions"]
+      verbs: ["get","list"]
  EOF
 }