From acaa29f8eb6c9dfdb143267e4cf341ff2aa1b339 Mon Sep 17 00:00:00 2001
From: "M. Mert Yildiran" <me@mertyildiran.com>
Date: Sun, 30 Jul 2023 02:48:32 +0300
Subject: [PATCH] :zap: Let the user `system:anonymous` access the
 `services/proxy` resource

---
 helm-chart/templates/02-cluster-role.yaml         | 1 +
 helm-chart/templates/03-cluster-role-binding.yaml | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/helm-chart/templates/02-cluster-role.yaml b/helm-chart/templates/02-cluster-role.yaml
index c8bc89d73..01c077c33 100644
--- a/helm-chart/templates/02-cluster-role.yaml
+++ b/helm-chart/templates/02-cluster-role.yaml
@@ -22,6 +22,7 @@ rules:
     resources:
       - pods
       - services
+      - services/proxy
       - endpoints
       - persistentvolumeclaims
       - ingresses
diff --git a/helm-chart/templates/03-cluster-role-binding.yaml b/helm-chart/templates/03-cluster-role-binding.yaml
index 8f32f6a75..465f71692 100644
--- a/helm-chart/templates/03-cluster-role-binding.yaml
+++ b/helm-chart/templates/03-cluster-role-binding.yaml
@@ -21,3 +21,5 @@ subjects:
   - kind: ServiceAccount
     name: kubeshark-service-account
     namespace: {{ .Release.Namespace }}
+  - kind: User
+    name: system:anonymous