From 26a4e2fa69a8b0191427f24905bca5aa0a5ced9d Mon Sep 17 00:00:00 2001 From: Vedant Shrotria Date: Wed, 15 May 2024 21:27:34 +0530 Subject: [PATCH] Added permissions to get secrets for graphql server (#4645) Signed-off-by: Jonsy13 --- chaoscenter/manifests/litmus-cluster-scope.yaml | 3 +++ mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml | 3 +++ mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml | 3 +++ 3 files changed, 9 insertions(+) diff --git a/chaoscenter/manifests/litmus-cluster-scope.yaml b/chaoscenter/manifests/litmus-cluster-scope.yaml index 2d2e5545299..be9e8dfbe48 100644 --- a/chaoscenter/manifests/litmus-cluster-scope.yaml +++ b/chaoscenter/manifests/litmus-cluster-scope.yaml @@ -10,6 +10,9 @@ rules: - apiGroups: [""] resources: [services, nodes, pods/log] # Will have to remove this for namespaced scope verbs: [get, watch] + - apiGroups: [""] # To get TLS Cert from secrets incase of cluster scope + resources: [secrets] + verbs: [get] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding diff --git a/mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml b/mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml index 760d0541f94..3e3c25bb518 100644 --- a/mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml +++ b/mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml @@ -10,6 +10,9 @@ rules: - apiGroups: [""] resources: [services, nodes, pods/log] verbs: [get, watch] + - apiGroups: [""] # To get TLS Cert from secrets incase of cluster scope + resources: [secrets] + verbs: [get] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding diff --git a/mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml b/mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml index d7c0f1f5b03..cbe296da5a4 100644 --- a/mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml +++ b/mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml @@ -10,6 +10,9 @@ rules: - apiGroups: [""] resources: [services, nodes, pods/log] verbs: [get, watch] + - apiGroups: [""] # To get TLS Cert from secrets incase of cluster scope + resources: [secrets] + verbs: [get] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding