From 31e0b18783df86446f91aa1ec2008841634a37ae Mon Sep 17 00:00:00 2001
From: Amit Bhatt <33670159+amitbhatt818@users.noreply.github.com>
Date: Thu, 9 Jan 2020 16:43:30 +0530
Subject: [PATCH] Added/Removed permissions for node-drain experiment (#101)

Signed-off-by: Amit Bhatt <amitbhatt818@gmail.com>
---
 charts/generic/drain-node/experiment.yaml | 47 ++++++++++++++---------
 1 file changed, 28 insertions(+), 19 deletions(-)

diff --git a/charts/generic/drain-node/experiment.yaml b/charts/generic/drain-node/experiment.yaml
index 3ddeab8..c8eb8da 100644
--- a/charts/generic/drain-node/experiment.yaml
+++ b/charts/generic/drain-node/experiment.yaml
@@ -9,26 +9,35 @@ metadata:
   version: 0.1.1
 spec:
   definition:
+    scope: Cluster
     permissions:
-      apiGroups:
-        - ""
-        - "extensions"
-        - "apps"
-        - "batch"
-        - "litmuschaos.io"
-      resources:
-        - "daemonsets"
-        - "statefulsets"
-        - "deployments"
-        - "replicasets"
-        - "jobs"
-        - "pods"
-        - "pods/exec"
-        - "chaosengines"
-        - "chaosexperiments"
-        - "chaosresults"
-      verbs:
-        - "*"
+      - apiGroups:
+          - ""
+          - "batch"
+          - "extensions"
+          - "litmuschaos.io"
+        resources:
+          - "jobs"
+          - "pods"
+          - "pods/eviction"
+          - "daemonsets"
+          - "chaosengines"
+          - "chaosexperiments"
+          - "chaosresults"
+        verbs:
+          - "create"
+          - "list"
+          - "get"
+          - "patch"
+          - "delete"
+      - apiGroups:
+          - ""
+        resources: 
+          - "nodes"
+        verbs :
+          - "get"
+          - "list"
+          - "patch"
     image: "litmuschaos/ansible-runner:ci"
     args:
     - -c