From e78fb2cf42ff749e56e23b0082cc7e2f2e8296b6 Mon Sep 17 00:00:00 2001 From: Tomer Shefler Date: Sun, 24 Dec 2023 14:27:30 +0200 Subject: [PATCH] Add missing rbac permissions for montor to access cbcontainersagents --- .../templates/dataplane_rbac.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/charts/cbcontainers-operator/cbcontainers-operator-chart/templates/dataplane_rbac.yaml b/charts/cbcontainers-operator/cbcontainers-operator-chart/templates/dataplane_rbac.yaml index 670f685d..9147bb83 100644 --- a/charts/cbcontainers-operator/cbcontainers-operator-chart/templates/dataplane_rbac.yaml +++ b/charts/cbcontainers-operator/cbcontainers-operator-chart/templates/dataplane_rbac.yaml @@ -49,6 +49,20 @@ rules: - validatingwebhookconfigurations verbs: - list + - apiGroups: + - operator.containers.carbonblack.io + resources: + - cbcontainersagents + verbs: + - get + - list + - watch + - apiGroups: + - operator.containers.carbonblack.io + resources: + - cbcontainersagents/status + verbs: + - get --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole