Browse Source

Merge pull request #13867 from jakesmith/hpcc-24253-serviceaccount

HPCC-24253 Fix service account api/role permissions

Reviewed-By: Richard Chapman <rchapman@hpccsystems.com>
Richard Chapman 5 years ago
parent
commit
d9a7e7980d
1 changed files with 6 additions and 10 deletions
  1. 6 10
      helm/hpcc/templates/service-account.yaml

+ 6 - 10
helm/hpcc/templates/service-account.yaml

@@ -9,16 +9,12 @@ kind: Role
 metadata:
   name: hpcc
 rules:
-  - apiGroups:
-      - "batch"
-    resources:
-      - jobs
-    verbs:
-      - get
-      - create
-      - list
-      - delete
-      - watch
+  - apiGroups: [ "" ] # core API group
+    resources: [ "pods" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "batch" ]
+    resources: [ "jobs" ]
+    verbs: [ "get", "create", "list", "delete", "watch" ]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding