Skip to content

Commit 0eaec66

Browse files
authored
Merge pull request kubearmor#1762 from Prateeknandle/job-rbac
chore(deployment):update rbac rules for jobs/cronjobs for kubearmor clusterRole
2 parents d9522a9 + 312aca6 commit 0eaec66

File tree

4 files changed

+26
-0
lines changed

4 files changed

+26
-0
lines changed

deployments/get/objects.go

+5
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,11 @@ func GetClusterRole() *rbacv1.ClusterRole {
5151
Resources: []string{"deployments", "replicasets", "daemonsets", "statefulsets"},
5252
Verbs: []string{"get", "patch", "list", "watch", "update"},
5353
},
54+
{
55+
APIGroups: []string{"batch"},
56+
Resources: []string{"jobs", "cronjobs"},
57+
Verbs: []string{"get"},
58+
},
5459
{
5560
APIGroups: []string{"security.kubearmor.com"},
5661
Resources: []string{"kubearmorpolicies", "kubearmorhostpolicies"},

deployments/helm/KubeArmor/templates/RBAC/roles.yaml

+7
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,13 @@ rules:
2929
- list
3030
- watch
3131
- update
32+
- apiGroups:
33+
- batch
34+
resources:
35+
- jobs
36+
- cronjobs
37+
verbs:
38+
- get
3239
- apiGroups:
3340
- security.kubearmor.com
3441
resources:

deployments/helm/KubeArmorOperator/templates/clusterrole-rbac.yaml

+7
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,13 @@ rules:
122122
- list
123123
- watch
124124
- update
125+
- apiGroups:
126+
- batch
127+
resources:
128+
- jobs
129+
- cronjobs
130+
verbs:
131+
- get
125132
- apiGroups:
126133
- security.kubearmor.com
127134
resources:

pkg/KubeArmorOperator/config/rbac/clusterrole.yaml

+7
Original file line numberDiff line numberDiff line change
@@ -123,6 +123,13 @@ rules:
123123
- list
124124
- watch
125125
- update
126+
- apiGroups:
127+
- batch
128+
resources:
129+
- jobs
130+
- cronjobs
131+
verbs:
132+
- get
126133
- apiGroups:
127134
- security.kubearmor.com
128135
resources:

0 commit comments

Comments
 (0)