changing kiem role

.github/workflows/action.yaml

@@ -27,7 +27,6 @@ env:
   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_DEV_SECRET_ID }} 
   AWS_REGION: us-east-1
 
-
 jobs:
   tag-validate:
     runs-on: ubuntu-latest
@@ -44,7 +43,7 @@ jobs:
     needs: [tag-validate]
     steps:
     - name: Checkout source
-      uses: accuknox/common-gh-actions/actions/checkout-source@main 
+      uses: accuknox/common-gh-actions/actions/checkout-source@main
     - name: Validate helm chart 
       uses: accuknox/common-gh-actions/actions/helm-check@main
       with:
@@ -152,4 +151,4 @@ jobs:
         version: ${{ github.ref_name }}
         ecr-region: ${{ env.AWS_REGION }}
         ecr-repo: ${{ env.REPO }}
-        type: public
+        type: public

kiem-job/templates/role.yaml

@@ -12,5 +12,22 @@ rules:
         - authorization.k8s.io
         - certificates.k8s.io
         - apiextensions.k8s.io
-    resources: ["*"]
-    verbs:  ["*"]
+        - batch
+    resources:  
+        - namespaces
+        - pods
+        - serviceaccounts
+        - roles
+        - rolebindings
+        - clusterroles
+        - clusterrolebindings
+        - deployments
+        - replicasets
+        - statefulsets
+        - daemonsets
+        - jobs
+        - cronjobs
+    verbs:
+        - get
+        - list
+        - watch