provide pods/exec resource permission (#373)

ops-center · May 23, 2018 · 1b7d364 · 1b7d364
1 parent 17b12c8
commit 1b7d364
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/chart/searchlight/templates/cluster-role.yaml b/chart/searchlight/templates/cluster-role.yaml
@@ -41,6 +41,10 @@ rules:
   - nodes
   - namespaces
   verbs: ["get", "list", "patch", "watch"]
+- apiGroups: [""]
+  resources:
+  - pods/exec
+  verbs: ["create"]
 - apiGroups: [""]
   resources:
   - events

diff --git a/hack/deploy/rbac-list.yaml b/hack/deploy/rbac-list.yaml
@@ -37,6 +37,10 @@ rules:
   - nodes
   - namespaces
   verbs: ["get", "list", "patch", "watch"]
+- apiGroups: [""]
+  resources:
+  - pods/exec
+  verbs: ["create"]
 - apiGroups: [""]
   resources:
   - events