Merge pull request #999 from bdunne/automation_role_pods_logs

Add permissions for pods/logs to the manageiq-automation role (cherry picked from commit d80208a)
ManageIQ · Oct 10, 2023 · a51e5d3 · a51e5d3
1 parent f945392
commit a51e5d3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/manageiq-operator/api/v1alpha1/helpers/miq-components/rbac.go b/manageiq-operator/api/v1alpha1/helpers/miq-components/rbac.go
@@ -73,6 +73,11 @@ func AutomationRole(cr *miqv1alpha1.ManageIQ, scheme *runtime.Scheme) (*rbacv1.R
 				Resources: []string{"pods", "secrets"},
 				Verbs:     []string{"create", "delete", "get", "list", "patch", "update", "watch"},
 			},
+			rbacv1.PolicyRule{
+				APIGroups: []string{""},
+				Resources: []string{"pods/logs"},
+				Verbs:     []string{"get"},
+			},
 		}
 
 		return nil