From 91492225ef4c8e4c8aa8645e6864001dbb993dec Mon Sep 17 00:00:00 2001
From: djeebus <joe@djeebus.net>
Date: Fri, 12 Jan 2024 12:44:16 -0500
Subject: [PATCH] reduce the scope to only what's necessary

---
 charts/kubechecks/Chart.yaml                 | 2 +-
 charts/kubechecks/templates/clusterrole.yaml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/charts/kubechecks/Chart.yaml b/charts/kubechecks/Chart.yaml
index 8d818044..2e1c7b31 100644
--- a/charts/kubechecks/Chart.yaml
+++ b/charts/kubechecks/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: kubechecks
 description: A Helm chart for kubechecks
-version: 0.4.2
+version: 0.4.3
 appVersion: "1.3.3"
 type: application
 maintainers:
diff --git a/charts/kubechecks/templates/clusterrole.yaml b/charts/kubechecks/templates/clusterrole.yaml
index 783ac613..c08105bf 100644
--- a/charts/kubechecks/templates/clusterrole.yaml
+++ b/charts/kubechecks/templates/clusterrole.yaml
@@ -3,6 +3,6 @@ kind: ClusterRole
 metadata:
   name: {{ include "kubechecks.fullname" . }}
 rules:
-  - apiGroups: ['*']
+  - apiGroups: ['argoproj.io']
     resources: ['applications', 'appprojects', 'services']
-    verbs: ['*']
+    verbs: ['get', 'list', 'watch']