Add missing rbac permissions for montor to access cbcontainersagents

octarinesec · Dec 24, 2023 · e78fb2c · e78fb2c
1 parent db1b182
commit e78fb2c
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/charts/cbcontainers-operator/cbcontainers-operator-chart/templates/dataplane_rbac.yaml b/charts/cbcontainers-operator/cbcontainers-operator-chart/templates/dataplane_rbac.yaml
@@ -49,6 +49,20 @@ rules:
       - validatingwebhookconfigurations
     verbs:
       - list
+  - apiGroups:
+        - operator.containers.carbonblack.io
+    resources:
+      - cbcontainersagents
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - operator.containers.carbonblack.io
+    resources:
+      - cbcontainersagents/status
+    verbs:
+      - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole