Add watch services permission

grafana · Sep 3, 2024 · 75964da · 75964da
1 parent 9a20dda
commit 75964da
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/examples/k8s/unprivileged.yaml b/examples/k8s/unprivileged.yaml
@@ -43,8 +43,8 @@ rules:
   verbs: ["get", "watch", "list"]
 - apiGroups: [""]
   resources: ["services"]
-  # list services is needed by network-policy beyla.
-  verbs: ["list"]
+  # list and watch services are needed by network-policy beyla.
+  verbs: ["list", "watch"]
 - apiGroups: ["*"]
   resources: ["deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs", "replicationcontrollers"]
   # Required to retrieve the owner references used by the seccomp beyla.