修正 provider Secret create RBAC 语义

2026-06-08 02:17:33 +08:00
parent 96bdc262ad
commit bda8e3bb1e
2 changed files with 6 additions and 2 deletions
@@ -365,10 +365,13 @@ metadata:
  name: agentrun-v01-mgr-provider-secret-manager
  namespace: ${namespace}
 rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["create"]
  - apiGroups: [""]
    resources: ["secrets"]
    resourceNames: ["agentrun-v01-provider-codex", "agentrun-v01-provider-deepseek", "agentrun-v01-provider-minimax-m3", "agentrun-v01-provider-dsflash-go"]
-    verbs: ["create", "get", "patch", "update"]
+    verbs: ["get", "patch", "update"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding