From 2f14a256c58470ed1044a8c1327ace5a018bc126 Mon Sep 17 00:00:00 2001 From: Mukul Sharma Date: Sat, 5 Sep 2026 01:55:47 +0530 Subject: [PATCH] deployer: read pod logs, so an app's output reaches the dashboard --- extra-manifests/toolshed-deployer-rbac.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/extra-manifests/toolshed-deployer-rbac.yaml b/extra-manifests/toolshed-deployer-rbac.yaml index 7137f70..b240275 100644 --- a/extra-manifests/toolshed-deployer-rbac.yaml +++ b/extra-manifests/toolshed-deployer-rbac.yaml @@ -48,9 +48,11 @@ rules: - apiGroups: [""] resources: ["secrets"] verbs: ["get", "create", "update", "patch", "delete"] - # Read-only. Pods are listed to report why a rollout failed, never changed. + # Read-only. Pods are listed to report why a rollout failed, never changed, + # and their output is read so an app's own logs can be shown in the + # dashboard without anyone reaching for kubectl. - apiGroups: [""] - resources: ["pods"] + resources: ["pods", "pods/log"] verbs: ["get", "list", "watch"] - apiGroups: ["apps"] resources: ["deployments"]