gitadmin/devops-infra-argo-config-gcp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

deployer: read pod logs, so an app's output reaches the dashboard

Browse Source
This commit is contained in:
Mukul Sharma
2026-09-05 01:55:47 +05:30
parent f23fc5f03c
commit 2f14a256c5
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extra-manifests/toolshed-deployer-rbac.yaml
+4 -2
View File
@@ -48,9 +48,11 @@ rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["secrets"] resources: ["secrets"]
verbs: ["get", "create", "update", "patch", "delete"] verbs: ["get", "create", "update", "patch", "delete"]
# Read-only. Pods are listed to report why a rollout failed, never changed. # Read-only. Pods are listed to report why a rollout failed, never changed,
# and their output is read so an app's own logs can be shown in the
# dashboard without anyone reaching for kubectl.
- apiGroups: [""] - apiGroups: [""]
resources: ["pods"] resources: ["pods", "pods/log"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: ["apps"] - apiGroups: ["apps"]
resources: ["deployments"] resources: ["deployments"]