Extend monitor role to be able to read the CR

octarinesec · Oct 4, 2023 · 2bf6eec · 2bf6eec
1 parent 95ea4f5
commit 2bf6eec
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/config/rbac/dataplane/dataplane_roles.yaml b/config/rbac/dataplane/dataplane_roles.yaml
@@ -19,6 +19,20 @@ rules:
       - validatingwebhookconfigurations
     verbs:
       - list
+  - apiGroups:
+      - operator.containers.carbonblack.io
+    resources:
+      - cbcontainersagents
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - operator.containers.carbonblack.io
+    resources:
+      - cbcontainersagents/status
+    verbs:
+      - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole