From f0af5fde816a50eef78de3d5befeabf11c743c53 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marcin=20=27Perk=27=20Sto=C5=BCek?= <perk@sumologic.com>
Date: Tue, 29 Dec 2020 14:40:55 +0100
Subject: [PATCH] Limit the RBAC permissions for the PVC Cleaner example

---
 .../sumologic-pvc-cleaner-cronjob-serviceaccount.yaml     | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/examples/sumologic-pvc-cleaner-cronjob-serviceaccount.yaml b/src/examples/sumologic-pvc-cleaner-cronjob-serviceaccount.yaml
index eff96678..87b0dfda 100644
--- a/src/examples/sumologic-pvc-cleaner-cronjob-serviceaccount.yaml
+++ b/src/examples/sumologic-pvc-cleaner-cronjob-serviceaccount.yaml
@@ -7,9 +7,10 @@ metadata:
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
-kind: ClusterRole
+kind: Role
 metadata:
   name: pvc-cleaner
+  namespace: sumologic
 rules:
 - apiGroups:
   - ""
@@ -36,12 +37,13 @@ rules:
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
-kind: ClusterRoleBinding
+kind: RoleBinding
 metadata:
   name: pvc-cleaner
+  namespace: sumologic
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
+  kind: Role
   name: pvc-cleaner
 subjects:
 - kind: ServiceAccount