From 9dc09f78c8076a2d3d971d5ca1fb3cedbe54b9a6 Mon Sep 17 00:00:00 2001
From: Shubham Chaudhary <shubham.chaudhary@mayadata.io>
Date: Sat, 25 Jan 2020 17:28:18 +0530
Subject: [PATCH] (feat): Adding minimal permission in openebs-pool-pod-failure
 chart (#123)

Signed-off-by: shubhamchaudhary <shubham.chaudhary@mayadata.io>
---
 .../openebs-pool-pod-failure/experiment.yaml  | 26 ++++++++++++++-----
 1 file changed, 20 insertions(+), 6 deletions(-)

diff --git a/charts/openebs/openebs-pool-pod-failure/experiment.yaml b/charts/openebs/openebs-pool-pod-failure/experiment.yaml
index 84ddb98..c3c3a6d 100644
--- a/charts/openebs/openebs-pool-pod-failure/experiment.yaml
+++ b/charts/openebs/openebs-pool-pod-failure/experiment.yaml
@@ -11,6 +11,7 @@ metadata:
   version: 0.1.5
 spec:
   definition:
+    scope: Cluster
     permissions:
       - apiGroups:
           - ""
@@ -19,21 +20,34 @@ spec:
           - "batch"
           - "litmuschaos.io"
           - "openebs.io"
+          - "storage.k8s.io"
         resources:
-          - "daemonsets"
-          - "statefulsets"
           - "deployments"
           - "replicasets"
           - "jobs"
           - "pods"
-          - "pods/exec"
+          - "configmaps"
+          - "secrets"
+          - "storageclasses"
+          - "persistentvolumeclaims"
+          - "cstorvolumereplicas"
           - "chaosengines"
           - "chaosexperiments"
           - "chaosresults"
-          - "persistentvolumeclaims"
-          - "cstorvolumereplicas"
         verbs:
-          - "*"
+          - "create"
+          - "get"
+          - "delete"
+          - "list"
+          - "patch"
+          - "update"
+      - apiGroups:
+          - ""
+        resources:
+          - "nodes"
+        verbs:
+          - "get"
+          - "list"
     image: "litmuschaos/ansible-runner:latest"
     args:
     - -c