github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-13 06:24:29 +00:00
Code Issues Projects Releases Wiki Activity

fix(falco-cluster-role): Add missing privileges for the apps Kubernetes API group

Browse Source 
Fixes #1064

Signed-off-by: Jean-Philippe Lachance <jplachance@coveo.com>
This commit is contained in:
Jean-Philippe Lachance 2020-04-08 16:21:26 -04:00 committed by poiana
parent 4d1820311e
commit ad4b8d4b9c
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
integrations/k8s-using-daemonset/k8s-with-rbac/falco-account.yaml
View File

@ -17,6 +17,9 @@ rules:
- apiGroups: ["extensions",""] - apiGroups: ["extensions",""]
resources: ["nodes","namespaces","pods","replicationcontrollers","replicasets","services","daemonsets","deployments","events","configmaps"] resources: ["nodes","namespaces","pods","replicationcontrollers","replicasets","services","daemonsets","deployments","events","configmaps"]
verbs: ["get","list","watch"] verbs: ["get","list","watch"]
- apiGroups: ["apps"]
resources: ["daemonsets","deployments","replicasets","statefulsets"]
verbs: ["get","list","watch"]
- nonResourceURLs: ["/healthz", "/healthz/*"] - nonResourceURLs: ["/healthz", "/healthz/*"]
verbs: ["get"] verbs: ["get"]
--- ---

3
integrations/k8s-using-deployment/k8s-with-rbac/falco-k8s-audit-account.yaml
View File

@ -17,6 +17,9 @@ rules:
- apiGroups: ["extensions",""] - apiGroups: ["extensions",""]
resources: ["nodes","namespaces","pods","replicationcontrollers","replicasets","services","daemonsets","deployments","events","configmaps"] resources: ["nodes","namespaces","pods","replicationcontrollers","replicasets","services","daemonsets","deployments","events","configmaps"]
verbs: ["get","list","watch"] verbs: ["get","list","watch"]
- apiGroups: ["apps"]
resources: ["daemonsets","deployments","replicasets","statefulsets"]
verbs: ["get","list","watch"]
- nonResourceURLs: ["/healthz", "/healthz/*"] - nonResourceURLs: ["/healthz", "/healthz/*"]
verbs: ["get"] verbs: ["get"]
--- ---