diff --git a/charts/coredns/coredns-pod-delete/rbac.yaml b/charts/coredns/coredns-pod-delete/rbac.yaml index e35ec12..33bb9ee 100644 --- a/charts/coredns/coredns-pod-delete/rbac.yaml +++ b/charts/coredns/coredns-pod-delete/rbac.yaml @@ -14,7 +14,7 @@ metadata: name: coredns-pod-delete-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["services", "pods","jobs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["services", "pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/container-kill/rbac.yaml b/charts/generic/container-kill/rbac.yaml index 99646c6..433d476 100644 --- a/charts/generic/container-kill/rbac.yaml +++ b/charts/generic/container-kill/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: container-kill-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","daemonsets","pods/exec","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","daemonsets","pods/exec","pods/logs","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/container-kill/rbac_nginx_getstarted.yaml b/charts/generic/container-kill/rbac_nginx_getstarted.yaml index 71deb29..e310d72 100644 --- a/charts/generic/container-kill/rbac_nginx_getstarted.yaml +++ b/charts/generic/container-kill/rbac_nginx_getstarted.yaml @@ -16,7 +16,7 @@ metadata: name: container-kill-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","daemonsets","pods/exec","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","daemonsets","pods/exec","pods/logs","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/disk-fill/rbac.yaml b/charts/generic/disk-fill/rbac.yaml index c579948..1c33758 100644 --- a/charts/generic/disk-fill/rbac.yaml +++ b/charts/generic/disk-fill/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: disk-fill-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch"] - resources: ["pods","jobs","pods/exec","events","daemonsets","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/exec","events","pods/logs","daemonsets","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/disk-loss/rbac.yaml b/charts/generic/disk-loss/rbac.yaml index fb93004..07b1c8b 100644 --- a/charts/generic/disk-loss/rbac.yaml +++ b/charts/generic/disk-loss/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: disk-loss-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","secrets","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","secrets","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/node-cpu-hog/rbac.yaml b/charts/generic/node-cpu-hog/rbac.yaml index 042ff1e..36fbccd 100644 --- a/charts/generic/node-cpu-hog/rbac.yaml +++ b/charts/generic/node-cpu-hog/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: node-cpu-hog-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","chaosengines","pods/logs","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/generic/node-drain/rbac.yaml b/charts/generic/node-drain/rbac.yaml index f3ac4a8..8c02f9d 100644 --- a/charts/generic/node-drain/rbac.yaml +++ b/charts/generic/node-drain/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: node-drain-sa rules: - apiGroups: ["","litmuschaos.io","batch","extensions"] - resources: ["pods","jobs","events","chaosengines","daemonsets","pods/eviction","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","chaosengines","pods/logs","daemonsets","pods/eviction","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/generic/pod-cpu-hog/rbac.yaml b/charts/generic/pod-cpu-hog/rbac.yaml index 757fe55..b252ce7 100644 --- a/charts/generic/pod-cpu-hog/rbac.yaml +++ b/charts/generic/pod-cpu-hog/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-cpu-hog-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/pod-delete/rbac.yaml b/charts/generic/pod-delete/rbac.yaml index 1cfbe89..df0567f 100644 --- a/charts/generic/pod-delete/rbac.yaml +++ b/charts/generic/pod-delete/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-delete-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","deployments","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","deployments","pods/logs","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/generic/pod-network-corruption/rbac.yaml b/charts/generic/pod-network-corruption/rbac.yaml index 608e86d..38824ce 100644 --- a/charts/generic/pod-network-corruption/rbac.yaml +++ b/charts/generic/pod-network-corruption/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-network-corruption-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/pod-network-latency/rbac.yaml b/charts/generic/pod-network-latency/rbac.yaml index 4f1aba6..539c25e 100644 --- a/charts/generic/pod-network-latency/rbac.yaml +++ b/charts/generic/pod-network-latency/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pod-network-latency-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/logs","events","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/generic/pod-network-loss/rbac.yaml b/charts/generic/pod-network-loss/rbac.yaml index 936f596..297970a 100644 --- a/charts/generic/pod-network-loss/rbac.yaml +++ b/charts/generic/pod-network-loss/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: pod-network-loss-sa rules: - apiGroups: ["","litmuschaos.io","batch"] - resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","events","pods/logs","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/kafka/kafka-broker-disk-failure/rbac.yaml b/charts/kafka/kafka-broker-disk-failure/rbac.yaml index 2db89c4..9b1742c 100644 --- a/charts/kafka/kafka-broker-disk-failure/rbac.yaml +++ b/charts/kafka/kafka-broker-disk-failure/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: kafka-broker-disk-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","jobs","events","pods/exec","statefulsets","secrets","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/logs","events","pods/exec","statefulsets","secrets","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/kafka/kafka-broker-pod-failure/rbac.yaml b/charts/kafka/kafka-broker-pod-failure/rbac.yaml index 7649cb1..8d8de6e 100644 --- a/charts/kafka/kafka-broker-pod-failure/rbac.yaml +++ b/charts/kafka/kafka-broker-pod-failure/rbac.yaml @@ -14,7 +14,7 @@ metadata: name: kafka-broker-pod-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","deployments","events","jobs","pods/exec","statefulsets","configmaps","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","deployments","pods/logs","events","jobs","pods/exec","statefulsets","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/openebs/openebs-control-plane-chaos/rbac.yaml b/charts/openebs/openebs-control-plane-chaos/rbac.yaml index c8a2093..04994ac 100644 --- a/charts/openebs/openebs-control-plane-chaos/rbac.yaml +++ b/charts/openebs/openebs-control-plane-chaos/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: control-plane-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps"] - resources: ["pods","deployments","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","deployments","pods/logs","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/openebs/openebs-pool-container-failure/rbac.yaml b/charts/openebs/openebs-pool-container-failure/rbac.yaml index 0b406fb..d76b666 100644 --- a/charts/openebs/openebs-pool-container-failure/rbac.yaml +++ b/charts/openebs/openebs-pool-container-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pool-container-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","jobs","daemonsets","events","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","jobs","daemonsets","events","pods/logs","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-pool-network-delay/rbac.yaml b/charts/openebs/openebs-pool-network-delay/rbac.yaml index 3345542..0d6403a 100644 --- a/charts/openebs/openebs-pool-network-delay/rbac.yaml +++ b/charts/openebs/openebs-pool-network-delay/rbac.yaml @@ -15,7 +15,7 @@ metadata: name: pool-network-delay-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","pods/exec","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"] + resources: ["pods","pods/exec","pods/logs","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-pool-network-loss/rbac.yaml b/charts/openebs/openebs-pool-network-loss/rbac.yaml index 5dfc3af..76db421 100644 --- a/charts/openebs/openebs-pool-network-loss/rbac.yaml +++ b/charts/openebs/openebs-pool-network-loss/rbac.yaml @@ -27,6 +27,7 @@ rules: - "pods" - "pods/exec" - "jobs" + - "pods/logs" - "events" - "configmaps" - "services" diff --git a/charts/openebs/openebs-pool-pod-failure/rbac.yaml b/charts/openebs/openebs-pool-pod-failure/rbac.yaml index fe716c1..a7519b9 100644 --- a/charts/openebs/openebs-pool-pod-failure/rbac.yaml +++ b/charts/openebs/openebs-pool-pod-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: pool-pod-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"] - resources: ["pods","jobs","deployments","events","configmaps","secrets","replicasets","persistentvolumeclaims","storageclasses","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","jobs","deployments","pods/logs","events","configmaps","secrets","replicasets","persistentvolumeclaims","storageclasses","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"] diff --git a/charts/openebs/openebs-target-container-failure/rbac.yaml b/charts/openebs/openebs-target-container-failure/rbac.yaml index 6d9a3ba..f0df809 100644 --- a/charts/openebs/openebs-target-container-failure/rbac.yaml +++ b/charts/openebs/openebs-target-container-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-container-failure-sa rules: - apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"] - resources: ["pods","jobs","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] + resources: ["pods","jobs","pods/logs","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-network-delay/rbac.yaml b/charts/openebs/openebs-target-network-delay/rbac.yaml index 6ad3cd7..a3bd582 100644 --- a/charts/openebs/openebs-target-network-delay/rbac.yaml +++ b/charts/openebs/openebs-target-network-delay/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-network-delay-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] - resources: ["pods","pods/exec","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","pods/exec","pods/logs","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-network-loss/rbac.yaml b/charts/openebs/openebs-target-network-loss/rbac.yaml index dfbd9c7..7873955 100644 --- a/charts/openebs/openebs-target-network-loss/rbac.yaml +++ b/charts/openebs/openebs-target-network-loss/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-network-loss-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] - resources: ["pods","pods/exec","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] + resources: ["pods","pods/exec","pods/logs","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"] verbs: ["create","list","get","patch","update","delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 diff --git a/charts/openebs/openebs-target-pod-failure/rbac.yaml b/charts/openebs/openebs-target-pod-failure/rbac.yaml index 417df9a..4d2d53c 100644 --- a/charts/openebs/openebs-target-pod-failure/rbac.yaml +++ b/charts/openebs/openebs-target-pod-failure/rbac.yaml @@ -16,7 +16,7 @@ metadata: name: target-pod-failure-sa rules: - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"] - resources: ["pods","jobs","deployments","pods/exec","events","chaosexperiments","chaosresults","chaosengines","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes"] + resources: ["pods","jobs","pods/logs","deployments","pods/exec","events","chaosexperiments","chaosresults","chaosengines","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes"] verbs: ["create","list","get","patch","update","delete"] - apiGroups: [""] resources: ["nodes"]