Remove admin role from fission-svc service account (#2233)

Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>

charts/fission-all/templates/common/clusterrole.yaml

@@ -11,6 +11,7 @@ rules:
   - secrets
   - services
   - serviceaccounts
+  - replicationcontrollers
   - namespaces
   - events
   verbs:
@@ -28,17 +29,28 @@ rules:
   - replicasets
   verbs:
   - '*'
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses
+  verbs:
+  - '*'
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   verbs:
-  - create
-  - delete
   - get
   - list
   - watch
-  - patch
 - apiGroups:
   - fission.io
   resources:
@@ -64,9 +76,12 @@ rules:
   - rolebindings
   verbs:
   - '*'
-- apiGroups: ["rbac.authorization.k8s.io"]
+- apiGroups:
-  resources: ["clusterroles"]
+  - rbac.authorization.k8s.io
-  verbs: ["bind"]
+  resources:
+  - clusterroles
+  verbs:
+  - bind
 - apiGroups:
   - keda.sh
   resources:

charts/fission-all/templates/common/rolebinding.yaml

@@ -1,13 +0,0 @@
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: fission-admin
-  namespace: {{ .Release.Namespace }}
-subjects:
-  - kind: ServiceAccount
-    name: fission-svc
-    namespace: {{ .Release.Namespace }}
-roleRef:
-  kind: ClusterRole
-  name: admin
-  apiGroup: rbac.authorization.k8s.io