(feat): Adding minimal permissions in kafka broker disk failure (#106)

Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>
2020-01-13 09:15:52 +05:30
parent 8bf67e4b2c
commit 56545ddc44
1 changed files with 22 additions and 20 deletions
--- a/charts/kafka/kafka-broker-disk-failure/experiment.yaml
+++ b/charts/kafka/kafka-broker-disk-failure/experiment.yaml
@@ -8,26 +8,28 @@ metadata:
  version: 0.1.3
 spec:
  definition:
+    scope: Cluster
    permissions:
-      apiGroups:
-        - ""
-        - "extensions"
-        - "apps"
-        - "batch"
-        - "litmuschaos.io"
-      resources:
-        - "daemonsets"
-        - "statefulsets"
-        - "deployments"
-        - "replicasets"
-        - "jobs"
-        - "pods"
-        - "pods/exec"
-        - "chaosengines"
-        - "chaosexperiments"
-        - "chaosresults"
-      verbs:
-        - "*"
+      - apiGroups:
+          - ""
+          - "apps"
+          - "batch"
+          - "litmuschaos.io"
+        resources:
+          - "statefulsets"
+          - "secrets"
+          - "jobs"
+          - "pods"
+          - "pods/exec"
+          - "chaosengines"
+          - "chaosexperiments"
+          - "chaosresults"
+        verbs:
+          - "create"
+          - "delete"
+          - "get"
+          - "list"
+          - "patch"
    image: "litmuschaos/ansible-runner:ci"
    args:
    - -c
@@ -102,4 +104,4 @@ spec:
    secrets:
    - name: kafka-broker-disk-failure
      mountPath: /tmp/
-      
+