deployer: read pod logs, so an app's output reaches the dashboard

2026-09-05 01:55:47 +05:30
parent f23fc5f03c
commit 2f14a256c5
1 changed files with 4 additions and 2 deletions
@@ -48,9 +48,11 @@ rules:
  - apiGroups: [""]
    resources: ["secrets"]
    verbs: ["get", "create", "update", "patch", "delete"]
-  # Read-only. Pods are listed to report why a rollout failed, never changed.
+  # Read-only. Pods are listed to report why a rollout failed, never changed,
+  # and their output is read so an app's own logs can be shown in the
+  # dashboard without anyone reaching for kubectl.
  - apiGroups: [""]
-    resources: ["pods"]
+    resources: ["pods", "pods/log"]
    verbs: ["get", "list", "watch"]
  - apiGroups: ["apps"]
    resources: ["deployments"]