Fix RBAC permission for release 0.4

Author: tamalsaha

hack/deploy/stash-with-rbac.yaml

@@ -10,26 +10,25 @@ rules:
   verbs: ["get", "create"]
 - apiGroups:
   - stash.appscode.com
-  resources:
-  - restics
+  resources: ["*"]
   verbs: ["*"]
 - apiGroups:
   - extensions
   resources:
   - deployments
   - replicasets
   - daemonsets
-  verbs: ["list", "watch", "update"]
+  verbs: ["get", "list", "watch", "update"]
 - apiGroups:
   - apps
   resources:
   - deployments
-  verbs: ["list", "watch", "update"]
+  verbs: ["get", "list", "watch", "update"]
 - apiGroups: [""]
   resources:
   - namespaces
   - replicationcontrollers
-  verbs: ["list", "watch", "update"]
+  verbs: ["get", "list", "watch", "update"]
 - apiGroups: [""]
   resources:
   - secrets
@@ -42,10 +41,17 @@ rules:
   resources:
   - pods
   verbs: ["list", delete"]
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - rolebindings
+  verbs: ["get", "create", "delete", "update"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: ClusterRoleBinding
 metadata:
+  labels:
+    app: stash
   name: stash-operator
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -59,6 +65,8 @@ subjects:
 apiVersion: v1
 kind: ServiceAccount
 metadata:
+  labels:
+    app: stash
   name: stash-operator
   namespace: kube-system
 ---
@@ -85,6 +93,7 @@ spec:
         args:
         - run
         - --v=3
+        - --rbac=true
         image: appscode/stash:0.4.1
         ports:
         - containerPort: 56790
@@ -131,9 +140,9 @@ spec:
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: ClusterRole
 metadata:
-  name: stash-sidecar
   labels:
     app: stash
+  name: stash-sidecar
 rules:
 - apiGroups:
   - stash.appscode.com
@@ -149,9 +158,6 @@ rules:
 - apiGroups: [""]
   resources:
   - replicationcontrollers
-  verbs: ["*"]
-- apiGroups: [""]
-  resources:
   - secrets
   verbs: ["get"]
 - apiGroups: [""]