From 60580b23213a1cb8ca60c8b85ae09ec9313d7bc6 Mon Sep 17 00:00:00 2001
From: OZGCloud <ozgcloud@mgm-tp.com>
Date: Thu, 6 Jul 2023 12:49:27 +0200
Subject: [PATCH] OZG-3961 - limit serviceaccount permissions

---
 doc/ServiceAccount/serviceaccount-keycloakclient-write.yaml | 2 --
 doc/ServiceAccount/serviceaccount-keycloakgroup-write.yaml  | 2 --
 doc/ServiceAccount/serviceaccount-keycloakrealm-write.yaml  | 2 --
 doc/ServiceAccount/serviceaccount-keycloakuser-write.yaml   | 2 --
 4 files changed, 8 deletions(-)

diff --git a/doc/ServiceAccount/serviceaccount-keycloakclient-write.yaml b/doc/ServiceAccount/serviceaccount-keycloakclient-write.yaml
index f8bf6b1..fc584d9 100644
--- a/doc/ServiceAccount/serviceaccount-keycloakclient-write.yaml
+++ b/doc/ServiceAccount/serviceaccount-keycloakclient-write.yaml
@@ -45,8 +45,6 @@ rules:
       - "*"
     resources:
       - ozgkeycloakclients/status
-      - ozgkeycloakclients/finalizers
-      - ozgkeycloakclients
     verbs:
       - get
       - list
diff --git a/doc/ServiceAccount/serviceaccount-keycloakgroup-write.yaml b/doc/ServiceAccount/serviceaccount-keycloakgroup-write.yaml
index 4ec0488..20bcfc9 100644
--- a/doc/ServiceAccount/serviceaccount-keycloakgroup-write.yaml
+++ b/doc/ServiceAccount/serviceaccount-keycloakgroup-write.yaml
@@ -45,8 +45,6 @@ rules:
       - "*"
     resources:
       - ozgkeycloakgroups/status
-      - ozgkeycloakgroups/finalizers
-      - ozgkeycloakgroups
     verbs:
       - get
       - list
diff --git a/doc/ServiceAccount/serviceaccount-keycloakrealm-write.yaml b/doc/ServiceAccount/serviceaccount-keycloakrealm-write.yaml
index e38b5c9..0bd619c 100644
--- a/doc/ServiceAccount/serviceaccount-keycloakrealm-write.yaml
+++ b/doc/ServiceAccount/serviceaccount-keycloakrealm-write.yaml
@@ -45,8 +45,6 @@ rules:
       - "*"
     resources:
       - ozgkeycloakrealms/status
-      - ozgkeycloakrealms/finalizers
-      - ozgkeycloakrealms
     verbs:
       - get
       - list
diff --git a/doc/ServiceAccount/serviceaccount-keycloakuser-write.yaml b/doc/ServiceAccount/serviceaccount-keycloakuser-write.yaml
index 297dc04..c8b8c57 100644
--- a/doc/ServiceAccount/serviceaccount-keycloakuser-write.yaml
+++ b/doc/ServiceAccount/serviceaccount-keycloakuser-write.yaml
@@ -45,8 +45,6 @@ rules:
       - "*"
     resources:
       - ozgkeycloakusers/status
-      - ozgkeycloakusers/finalizers
-      - ozgkeycloakusers
     verbs:
       - get
       - list
-- 
GitLab