Skip to content
This repository was archived by the owner on Oct 14, 2020. It is now read-only.

Commit bc3fe87

Browse files
committed
Add back pod get permissions
Required to service account with that permission for the lurcher
1 parent a3ca73c commit bc3fe87

File tree

3 files changed

+13
-0
lines changed

3 files changed

+13
-0
lines changed

operator/config/rbac/role.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,12 @@ rules:
1818
- patch
1919
- update
2020
- watch
21+
- apiGroups:
22+
- ""
23+
resources:
24+
- pods
25+
verbs:
26+
- get
2127
- apiGroups:
2228
- ""
2329
resources:

operator/controllers/execution/scan_controller.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,7 @@ var (
6363
// Permissions needed to create service accounts for lurcher, parser and persistence providers
6464

6565
// Pod permission are required to grant these permission to service accounts
66+
// +kubebuilder:rbac:groups=core,resources=pods,verbs=get
6667
// +kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;watch;list;create
6768
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles,verbs=get;watch;list;create
6869
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;watch;list;create

operator/templates/rbac/role.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,12 @@ rules:
1818
- patch
1919
- update
2020
- watch
21+
- apiGroups:
22+
- ""
23+
resources:
24+
- pods
25+
verbs:
26+
- get
2127
- apiGroups:
2228
- ""
2329
resources:

0 commit comments

Comments
 (0)