| commit | f9fd2aa3c59d4f90088c753917cf880190f036c4 | [log] [tgz] |
|---|---|---|
| author | Vladimir Jigulin <vjigulin@mirantis.com> | Wed Jan 09 21:14:12 2019 +0400 |
| committer | Victor Ryzhenkin <vryzhenkin@mirantis.com> | Thu Jan 10 18:29:08 2019 +0000 |
| tree | c267c2a2dffa2c42cd72fc533b1632c648f9139e | |
| parent | 03e4817b8518233d1a9f59f502f287a299d6ac55 [diff] |
Add "get namespaces" rule to genie-pod-patch RBAC Change-Id: I3e31f21a3e366a50bc0d8989e39e8df3cf97d098 Closes-PROD: PROD-26370
diff --git a/metadata/service/control/roles/genie-pod-patch.yml b/metadata/service/control/roles/genie-pod-patch.yml index d3f2da3..df4b708 100644 --- a/metadata/service/control/roles/genie-pod-patch.yml +++ b/metadata/service/control/roles/genie-pod-patch.yml
@@ -12,6 +12,12 @@ - "pods" verbs: - "patch" + - apiGroups: + - "" + resources: + - "namespaces" + verbs: + - "get" binding: genie-pod-patch: subject: