Add additional k8s rbac resources (#514)

Falco also needs to list/watch replicasets, daemonsets, and deployments,
so add them to the resources list.
This commit is contained in:
Mark Stemm 2019-02-06 15:51:57 -08:00 committed by GitHub
parent 477fcb56f1
commit bd4c3ffa39
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -15,7 +15,7 @@ metadata:
role: security
rules:
- apiGroups: ["extensions",""]
resources: ["nodes","namespaces","pods","replicationcontrollers","services","events","configmaps"]
resources: ["nodes","namespaces","pods","replicationcontrollers","replicasets","services","daemonsets","deployments","events","configmaps"]
verbs: ["get","list","watch"]
- nonResourceURLs: ["/healthz", "/healthz/*"]
verbs: ["get"]