Skip to content

Commit 0d35477

Browse files
committed
update namespace permissions
This is an attempt to prevent the namespace test from failing.
1 parent 040f61e commit 0d35477

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

resources/charts/namespaces/values.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,13 @@ roles:
77
- name: pod-viewer
88
rules:
99
- apiGroups: [""]
10-
resources: ["pods", "services"]
10+
resources: ["pods", "services", "configmaps"]
1111
verbs: ["get", "list", "watch"]
1212
- apiGroups: [""]
1313
resources: ["pods/log", "pods/exec", "pods/attach", "pods/portforward"]
1414
verbs: ["get"]
1515
- apiGroups: [""]
16-
resources: ["configmaps", "secrets"]
16+
resources: ["secrets"]
1717
verbs: ["get", "list"]
1818
- apiGroups: [""]
1919
resources: ["persistentvolumeclaims", "namespaces"]
@@ -34,7 +34,7 @@ roles:
3434
verbs: ["get", "create"]
3535
- apiGroups: [""]
3636
resources: ["configmaps", "secrets", "serviceaccounts"]
37-
verbs: ["get", "list", "create", "update"]
37+
verbs: ["get", "list", "create", "update", "watch"]
3838
- apiGroups: ["rbac.authorization.k8s.io"]
3939
resources: ["roles", "rolebindings"]
4040
verbs: ["get", "list", "create", "update"]

0 commit comments

Comments
 (0)