From b8874148453183d07f91da3952a492dbe708ab48 Mon Sep 17 00:00:00 2001
From: jackyu <jackyu@yunify.com>
Date: Fri, 4 Aug 2023 20:17:11 +0800
Subject: [PATCH] fix: add rule get-devops to create-devops role

---
 roles/ks-core/prepare/files/ks-init/role-templates.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/ks-core/prepare/files/ks-init/role-templates.yaml b/roles/ks-core/prepare/files/ks-init/role-templates.yaml
index 8e0b2de26..42f7701c8 100644
--- a/roles/ks-core/prepare/files/ks-init/role-templates.yaml
+++ b/roles/ks-core/prepare/files/ks-init/role-templates.yaml
@@ -1364,6 +1364,7 @@ rules:
     verbs:
       - create
       - watch
+      - get
 
 ---
 apiVersion: iam.kubesphere.io/v1alpha2
@@ -2227,6 +2228,12 @@ role:
       verbs:
         - create
         - watch
+    - apiGroups:
+        - '*'
+      resources:
+        - devops
+      verbs:
+        - get
     - apiGroups:
         - monitoring.kubesphere.io
         - metering.kubesphere.io