add missing permissions for restart (#102)

kubesaw · Jan 16, 2025 · 80264d8 · 80264d8
1 parent b87866f
commit 80264d8
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 4 deletions.
diff --git a/resources/roles/host.yaml b/resources/roles/host.yaml
@@ -12,16 +12,24 @@ objects:
       provider: ksctl
   rules:
   - apiGroups:
-    - apps
+    - "apps"
     resources:
-    - deployments
+    - "deployments"
     verbs:
     - "get"
     - "list"
     - "patch"
     - "update"
     - "watch"
+  - apiGroups:
+    - ""
+    resources:
+    - "pods"
+    verbs:
     - "delete"
+    - "get"
+    - "list"
+    - "watch"
 
 - kind: Role
   apiVersion: rbac.authorization.k8s.io/v1
@@ -287,3 +295,22 @@ objects:
     - "get"
     - "list"
     - "delete"
+  - apiGroups:
+    - "apps"
+    resources:
+    - "deployments"
+    verbs:
+    - "get"
+    - "list"
+    - "patch"
+    - "update"
+    - "watch"
+  - apiGroups:
+    - ""
+    resources:
+    - "pods"
+    verbs:
+    - "delete"
+    - "get"
+    - "list"
+    - "watch"
diff --git a/resources/roles/member.yaml b/resources/roles/member.yaml
@@ -12,16 +12,24 @@ objects:
       provider: ksctl
   rules:
   - apiGroups:
-    - apps
+    - "apps"
     resources:
-    - deployments
+    - "deployments"
     verbs:
     - "get"
     - "list"
     - "patch"
     - "update"
     - "watch"
+  - apiGroups:
+    - ""
+    resources:
+    - "pods"
+    verbs:
     - "delete"
+    - "get"
+    - "list"
+    - "watch"
 
 - kind: Role
   apiVersion: rbac.authorization.k8s.io/v1