Merge pull request #162 from ispeakc0de/add-events-permission

refactor(permissions): Adding events resources permission in all experiments

charts/coredns/coredns-pod-delete/experiment.yaml

@@ -17,6 +17,7 @@ spec:
         - "services"
         - "jobs"
         - "pods"
+        - "events"
         - "chaosengines"
         - "chaosexperiments"
         - "chaosresults"

charts/coredns/coredns-pod-delete/rbac.yaml

@@ -14,7 +14,7 @@ metadata:
     name: coredns-pod-delete-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch"]
-  resources: ["services", "pods","jobs","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["services", "pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/container-kill/experiment.yaml

@@ -18,6 +18,7 @@ spec:
           - "daemonsets"
           - "jobs"
           - "pods"
+          - "events"
           - "pods/exec"
           - "chaosengines"
           - "chaosexperiments"

charts/generic/container-kill/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: container-kill-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","jobs","daemonsets","pods/exec","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","daemonsets","pods/exec","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/container-kill/rbac_nginx_getstarted.yaml

@@ -16,7 +16,7 @@ metadata:
     name: container-kill-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","jobs","daemonsets","pods/exec","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","daemonsets","pods/exec","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/disk-fill/experiment.yaml

@@ -19,6 +19,7 @@ spec:
           - "jobs"
           - "pods"
           - "pods/exec"
+          - "events"
           - "daemonsets"
           - "chaosengines"
           - "chaosexperiments"

charts/generic/disk-fill/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: disk-fill-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch"]
-  resources: ["pods","jobs","pods/exec","daemonsets","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","pods/exec","events","daemonsets","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/disk-loss/experiment.yaml

@@ -17,6 +17,7 @@ spec:
         resources:
           - "jobs"
           - "pods"
+          - "events"
           - "secrets"
           - "chaosengines"
           - "chaosexperiments"

charts/generic/disk-loss/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: disk-loss-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch"]
-  resources: ["pods","jobs","secrets","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","secrets","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/node-cpu-hog/experiment.yaml

@@ -20,6 +20,7 @@ spec:
           - "jobs"
           - "pods"
           - "pods/exec"
+          - "events"
           - "chaosengines"
           - "chaosexperiments"
           - "chaosresults"

charts/generic/node-cpu-hog/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: node-cpu-hog-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","daemonsets","jobs","pods/exec","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","daemonsets","jobs","pods/exec","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 - apiGroups: [""]
   resources: ["nodes"]

charts/generic/node-drain/experiment.yaml

@@ -19,6 +19,7 @@ spec:
         resources:
           - "jobs"
           - "pods"
+          - "events"
           - "pods/eviction"
           - "daemonsets"
           - "chaosengines"

charts/generic/node-drain/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: node-drain-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","extensions"]
-  resources: ["pods","jobs","chaosengines","daemonsets","pods/eviction","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","events","chaosengines","daemonsets","pods/eviction","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 - apiGroups: [""]
   resources: ["nodes"]

charts/generic/pod-cpu-hog/experiment.yaml

@@ -17,6 +17,7 @@ spec:
         resources:
           - "jobs"
           - "pods"
+          - "events"
           - "chaosengines"
           - "chaosexperiments"
           - "chaosresults"

charts/generic/pod-cpu-hog/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: pod-cpu-hog-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch"]
-  resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/pod-delete/experiment.yaml

@@ -19,6 +19,7 @@ spec:
           - "deployments"
           - "jobs"
           - "pods"
+          - "events"
           - "configmaps"
           - "chaosengines"
           - "chaosexperiments"

charts/generic/pod-delete/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: pod-delete-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","deployments","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","deployments","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 - apiGroups: [""]
   resources: ["nodes"]

charts/generic/pod-network-corruption/experiment.yaml

@@ -17,6 +17,7 @@ spec:
         resources:
           - "jobs"
           - "pods"
+          - "events"
           - "chaosengines"
           - "chaosexperiments"
           - "chaosresults"

charts/generic/pod-network-corruption/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: pod-network-corruption-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch"]
-  resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/pod-network-latency/experiment.yaml

@@ -17,6 +17,7 @@ spec:
         resources:
           - "jobs"
           - "pods"
+          - "events"
           - "chaosengines"
           - "chaosexperiments"
           - "chaosresults"

charts/generic/pod-network-latency/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: pod-network-latency-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch"]
-  resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/generic/pod-network-loss/experiment.yaml

@@ -17,6 +17,7 @@ spec:
       resources:
       - "jobs"
       - "pods"
+      - "events"
       - "chaosengines"
       - "chaosexperiments"
       - "chaosresults"

charts/generic/pod-network-loss/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: pod-network-loss-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch"]
-  resources: ["pods","jobs","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","events","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/kafka/kafka-broker-disk-failure/experiment.yaml

@@ -19,6 +19,7 @@ spec:
           - "statefulsets"
           - "secrets"
           - "jobs"
+          - "events"
           - "pods"
           - "pods/exec"
           - "chaosengines"

charts/kafka/kafka-broker-disk-failure/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: kafka-broker-disk-failure-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","jobs","pods/exec","statefulsets","secrets","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","events","pods/exec","statefulsets","secrets","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/kafka/kafka-broker-pod-failure/experiment.yaml

@@ -18,6 +18,7 @@ spec:
         resources:
           - "statefulsets"
           - "deployments"
+          - "events"
           - "configmaps"
           - "jobs"
           - "pods"

charts/kafka/kafka-broker-pod-failure/rbac.yaml

@@ -14,7 +14,7 @@ metadata:
     name: kafka-broker-pod-failure-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","deployments","jobs","pods/exec","statefulsets","configmaps","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","deployments","events","jobs","pods/exec","statefulsets","configmaps","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","delete"]
 - apiGroups: [""]
   resources: ["nodes"]

charts/openebs/openebs-control-plane-chaos/experiment.yaml

@@ -21,6 +21,7 @@ spec:
         resources:
           - "pods"
           - "deployments"
+          - "events"
           - "jobs"
           - "configmaps"
           - "chaosengines"

charts/openebs/openebs-control-plane-chaos/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: control-plane-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps"]
-  resources: ["pods","deployments","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","deployments","events","jobs","configmaps","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 - apiGroups: [""]
   resources: ["nodes"]

charts/openebs/openebs-pool-container-failure/experiment.yaml

@@ -24,6 +24,7 @@ spec:
         resources:
           - "daemonsets"
           - "replicasets"
+          - "events"
           - "jobs"
           - "pods"
           - "pods/exec"

charts/openebs/openebs-pool-container-failure/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: pool-container-failure-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"]
-  resources: ["pods","jobs","daemonsets","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
+  resources: ["pods","jobs","daemonsets","events","replicasets","pods/exec","configmaps","secrets","persistentvolumeclaims","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/openebs/openebs-pool-network-delay/experiment.yaml

@@ -25,6 +25,7 @@ spec:
           - "pods"
           - "pods/exec"
           - "jobs"
+          - "events"
           - "configmaps"
           - "services"
           - "persistentvolumeclaims"

charts/openebs/openebs-pool-network-delay/rbac.yaml

@@ -15,7 +15,7 @@ metadata:
     name: pool-network-delay-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"]
-  resources: ["pods","pods/exec","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"]
+  resources: ["pods","pods/exec","events","jobs","configmaps","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults","cstorpools","cstorvolumereplicas","replicasets"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/openebs/openebs-pool-network-loss/experiment.yaml

@@ -23,6 +23,7 @@ spec:
         resources:
           - "pods"
           - "pods/exec"
+          - "events"
           - "jobs"
           - "configmaps"
           - "services"

charts/openebs/openebs-pool-network-loss/rbac.yaml

@@ -27,6 +27,7 @@ rules:
     - "pods"
     - "pods/exec"
     - "jobs"
+    - "events"
     - "configmaps"
     - "services"
     - "persistentvolumeclaims"

charts/openebs/openebs-pool-pod-failure/experiment.yaml

@@ -25,6 +25,7 @@ spec:
           - "deployments"
           - "replicasets"
           - "jobs"
+          - "events"
           - "pods"
           - "configmaps"
           - "secrets"

charts/openebs/openebs-pool-pod-failure/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: pool-pod-failure-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io","openebs.io"]
-  resources: ["pods","jobs","deployments","configmaps","secrets","replicasets","persistentvolumeclaims","storageclasses","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
+  resources: ["pods","jobs","deployments","events","configmaps","secrets","replicasets","persistentvolumeclaims","storageclasses","cstorvolumereplicas","chaosexperiments","chaosresults","chaosengines"]
   verbs: ["create","list","get","patch","update","delete"]
 - apiGroups: [""]
   resources: ["nodes"]

charts/openebs/openebs-target-container-failure/experiment.yaml

@@ -23,6 +23,7 @@ spec:
           - "daemonsets"
           - "jobs"
           - "pods"
+          - "events"
           - "pods/exec"
           - "configmaps"
           - "secrets"

charts/openebs/openebs-target-container-failure/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: target-container-failure-sa
 rules:
 - apiGroups: ["","litmuschaos.io","batch","apps","storage.k8s.io"]
-  resources: ["pods","jobs","pods/exec","daemonsets","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
+  resources: ["pods","jobs","pods/exec","daemonsets","events","configmaps","secrets","persistentvolumeclaims","storageclasses","persistentvolumes","chaosengines","chaosexperiments","chaosresults"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/openebs/openebs-target-network-delay/experiment.yaml

@@ -23,6 +23,7 @@ spec:
           - "jobs"
           - "pods"
           - "services"
+          - "events"
           - "pods/exec"
           - "configmaps"
           - "secrets"

charts/openebs/openebs-target-network-delay/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: target-network-delay-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"]
-  resources: ["pods","pods/exec","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"]
+  resources: ["pods","pods/exec","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/openebs/openebs-target-network-loss/experiment.yaml

@@ -22,6 +22,7 @@ spec:
         resources:
           - "jobs"
           - "pods"
+          - "events"
           - "services"
           - "pods/exec"
           - "configmaps"

charts/openebs/openebs-target-network-loss/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: target-network-loss-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"]
-  resources: ["pods","pods/exec","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"]
+  resources: ["pods","pods/exec","events","jobs","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes","chaosexperiments","chaosresults","chaosengines"]
   verbs: ["create","list","get","patch","update","delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1

charts/openebs/openebs-target-pod-failure/experiment.yaml

@@ -23,6 +23,7 @@ spec:
         resources:
           - "deployments"
           - "jobs"
+          - "events"
           - "pods"
           - "pods/exec"
           - "configmaps"

charts/openebs/openebs-target-pod-failure/rbac.yaml

@@ -16,7 +16,7 @@ metadata:
     name: target-pod-failure-sa
 rules:
 - apiGroups: ["","apps","litmuschaos.io","batch","extensions","storage.k8s.io"]
-  resources: ["pods","jobs","deployments","pods/exec","chaosexperiments","chaosresults","chaosengines","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes"]
+  resources: ["pods","jobs","deployments","pods/exec","events","chaosexperiments","chaosresults","chaosengines","configmaps","secrets","services","persistentvolumeclaims","storageclasses","persistentvolumes"]
   verbs: ["create","list","get","patch","update","delete"]
 - apiGroups: [""]
   resources: ["nodes"]