reduce permissions

Author: bn222

internal/controller/bindata/daemon/02.daemon_role.yaml

@@ -25,40 +25,3 @@ rules:
   - patch
   - update
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - serviceaccounts
-  - pods
-  - services
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-  - update
-  - patch
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - roles
-  - rolebindings
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - apps
-  resources:
-  - daemonsets
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete

internal/controller/bindata/vsp/02.vsp_role.yaml

@@ -15,37 +15,9 @@ rules:
 - apiGroups:
   - ""
   resources:
-  - serviceaccounts
   - pods
-  - services
+  - pods/status
   verbs:
   - get
   - list
   - watch
-  - create
-  - delete
-  - update
-  - patch
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - roles
-  - rolebindings
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-    - apps
-  resources:
-    - daemonsets
-  verbs:
-    - watch
-    - list
-    - get
-    - create
-    - delete
-    - update

internal/controller/bindata/vsp/04.vsp_cluster_role.yaml

@@ -12,7 +12,3 @@ rules:
   - get
   - list
   - watch
-  - create
-  - delete
-  - update
-  - patch