From 56545ddc44e35b256f83214ffb609b9e54a6811b Mon Sep 17 00:00:00 2001
From: Shubham Chaudhary <shubham.chaudhary@mayadata.io>
Date: Mon, 13 Jan 2020 09:15:52 +0530
Subject: [PATCH] (feat): Adding minimal permissions in kafka broker disk
 failure (#106)

Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>
---
 .../kafka-broker-disk-failure/experiment.yaml | 42 ++++++++++---------
 1 file changed, 22 insertions(+), 20 deletions(-)

diff --git a/charts/kafka/kafka-broker-disk-failure/experiment.yaml b/charts/kafka/kafka-broker-disk-failure/experiment.yaml
index 82c7521..ec3a2dd 100644
--- a/charts/kafka/kafka-broker-disk-failure/experiment.yaml
+++ b/charts/kafka/kafka-broker-disk-failure/experiment.yaml
@@ -8,26 +8,28 @@ metadata:
   version: 0.1.3
 spec:
   definition:
+    scope: Cluster
     permissions:
-      apiGroups:
-        - ""
-        - "extensions"
-        - "apps"
-        - "batch"
-        - "litmuschaos.io"
-      resources:
-        - "daemonsets"
-        - "statefulsets"
-        - "deployments"
-        - "replicasets"
-        - "jobs"
-        - "pods"
-        - "pods/exec"
-        - "chaosengines"
-        - "chaosexperiments"
-        - "chaosresults"
-      verbs:
-        - "*"
+      - apiGroups:
+          - ""
+          - "apps"
+          - "batch"
+          - "litmuschaos.io"
+        resources:
+          - "statefulsets"
+          - "secrets"
+          - "jobs"
+          - "pods"
+          - "pods/exec"
+          - "chaosengines"
+          - "chaosexperiments"
+          - "chaosresults"
+        verbs:
+          - "create"
+          - "delete"
+          - "get"
+          - "list"
+          - "patch"
     image: "litmuschaos/ansible-runner:ci"
     args:
     - -c
@@ -102,4 +104,4 @@ spec:
     secrets:
     - name: kafka-broker-disk-failure
       mountPath: /tmp/
-      
+      
\ No newline at end of file