Bugfix: should not be able to edit tenant if readOnly is set (#2157)

Signed-off-by: pjuarezd <[email protected]>
minio · Jun 11, 2024 · 7a2834c · 7a2834c
1 parent 45ef52d
commit 7a2834c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/helm/operator/templates/console-clusterrole.yaml b/helm/operator/templates/console-clusterrole.yaml
@@ -122,7 +122,13 @@ rules:
     resources:
       - '*'
     verbs:
+      {{- if not .Values.console.readOnly }}
       - '*'
+      {{- else }}
+      - get
+      - list
+      - watch
+      {{- end}}
   - apiGroups:
       - min.io
     resources: