Add missing required permissions to diagnose

Add getting and listing namespaces permission, which is used during kubeproxy and firewall in diagnose tests Add getting and listing deployments permission, which used during the deployment diagnose test Signed-off-by: Tomer Shefler <[email protected]>
dfarrell07 · Aug 30, 2022 · ee22694 · ee22694
1 parent d11c75f
commit ee22694
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/config/rbac/submariner-diagnose/role.yaml b/config/rbac/submariner-diagnose/role.yaml
@@ -18,13 +18,15 @@ rules:
       - ""
     resources:
       - configmaps
+      - namespaces
     verbs:
       - get
       - list
   - apiGroups:
       - apps
     resources:
       - daemonsets
+      - deployments
     verbs:
       - get
       - list

diff --git a/pkg/embeddedyamls/yamls.go b/pkg/embeddedyamls/yamls.go
@@ -2729,13 +2729,15 @@ rules:
       - ""
     resources:
       - configmaps
+      - namespaces
     verbs:
       - get
       - list
   - apiGroups:
       - apps
     resources:
       - daemonsets
+      - deployments
     verbs:
       - get
       - list