From 3954215395e863181d9fe6a820bdcd5e66ef4bbb Mon Sep 17 00:00:00 2001
From: Shubham Chaudhary <shubham.chaudhary@mayadata.io>
Date: Thu, 23 Jan 2020 17:05:09 +0530
Subject: [PATCH] (feat): Adding minimal permission in
 openebs-target-pod-failure chart (#121)

Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>
---
 .../experiment.yaml                           | 22 ++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/charts/openebs/openebs-target-pod-failure/experiment.yaml b/charts/openebs/openebs-target-pod-failure/experiment.yaml
index e761f76..906c618 100644
--- a/charts/openebs/openebs-target-pod-failure/experiment.yaml
+++ b/charts/openebs/openebs-target-pod-failure/experiment.yaml
@@ -11,6 +11,7 @@ metadata:
   version: 0.1.6
 spec:
   definition:
+    scope: Cluster
     permissions:
       - apiGroups:
           - ""
@@ -18,16 +19,15 @@ spec:
           - "apps"
           - "batch"
           - "litmuschaos.io"
-          - "openebs.io"
           - "storage.k8s.io"
         resources:
-          - "daemonsets"
-          - "statefulsets"
           - "deployments"
-          - "replicasets"
           - "jobs"
           - "pods"
           - "pods/exec"
+          - "configmaps"
+          - "secrets"
+          - "services"
           - "chaosengines"
           - "chaosexperiments"
           - "chaosresults"
@@ -35,7 +35,19 @@ spec:
           - "storageclasses"
           - "persistentvolumes"
         verbs:
-          - "*"
+          - "create"
+          - "get"
+          - "delete"
+          - "list"
+          - "patch"
+          - "update"
+        - apiGroups:
+          - ""
+          resources:
+          - "nodes"
+          verbs:
+          - "get"
+          - "list"
     image: "litmuschaos/ansible-runner:latest"
     args:
     - -c