Separate service accounts for each fission component (#2560)

* Separate service accounts for each component
* Permission changes per component
* Fixed fluentbit permissions
* added hooks to pre-upgrade service account and role
* Adjusted hook weights for pre-upgrade hook
* Replaced * with explicit permissions
This commit is contained in:
Runit Misra
2022-10-06 19:17:34 +05:30
committed by GitHub
parent 18225db2bd
commit 0739aca920
48 changed files with 974 additions and 36 deletions
@@ -173,7 +173,7 @@ spec:
- name: fluentbit-config
mountPath: /fluent-bit/etc/
readOnly: true
serviceAccountName: fission-svc
serviceAccountName: fission-fluentbit
volumes:
- name: container-log
hostPath: