Added permissions to get secrets for graphql server (#4645)

Signed-off-by: Jonsy13 <[email protected]>
litmuschaos · May 15, 2024 · 26a4e2f · 26a4e2f
1 parent 15f24bc
commit 26a4e2f
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/chaoscenter/manifests/litmus-cluster-scope.yaml b/chaoscenter/manifests/litmus-cluster-scope.yaml
@@ -10,6 +10,9 @@ rules:
   - apiGroups: [""]
     resources: [services, nodes, pods/log] # Will have to remove this for namespaced scope
     verbs: [get, watch]
+  - apiGroups: [""] # To get TLS Cert from secrets incase of cluster scope
+    resources: [secrets]
+    verbs: [get]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml b/mkdocs/docs/3.7.0/litmus-3.7.0-without-resources.yaml
@@ -10,6 +10,9 @@ rules:
   - apiGroups: [""]
     resources: [services, nodes, pods/log]
     verbs: [get, watch]
+  - apiGroups: [""] # To get TLS Cert from secrets incase of cluster scope
+    resources: [secrets]
+    verbs: [get]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml b/mkdocs/docs/3.7.0/litmus-cluster-scope-3.7.0.yaml
@@ -10,6 +10,9 @@ rules:
   - apiGroups: [""]
     resources: [services, nodes, pods/log]
     verbs: [get, watch]
+  - apiGroups: [""] # To get TLS Cert from secrets incase of cluster scope
+    resources: [secrets]
+    verbs: [get]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding