🐛 [patch] Correct pods/log permission (#4)

agoda-com · Mar 19, 2020 · 92b88ca · 92b88ca
1 parent 510d195
commit 92b88ca
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 3 deletions.
diff --git a/Makefile b/Makefile
@@ -490,7 +490,7 @@ manifests: controller-gen
 
 # Generate code
 generate: controller-gen
-	$(CONTROLLER_GEN) object:headerFile=./hack/boilerplate.go.txt paths="./..."
+	$(CONTROLLER_GEN) object:headerFile=./builder/boilerplate.go.txt paths="./..."
 
 # find or download controller-gen
 # download controller-gen if necessary

diff --git a/hack/boilerplate.go.txt → builder/boilerplate.go.txt b/hack/boilerplate.go.txt → builder/boilerplate.go.txt
diff --git a/config/chart/samsahai/templates/clusterrole-rbac.yaml b/config/chart/samsahai/templates/clusterrole-rbac.yaml
@@ -29,9 +29,9 @@ rules:
       - bindings
       - configmaps
       - limitranges
-      - logs
       - persistentvolumeclaims
       - pods
+      - pods/log
       - namespaces
       - resourcequotas
       - services

diff --git a/internal/samsahai/k8sobject/object.go b/internal/samsahai/k8sobject/object.go
@@ -276,8 +276,8 @@ func GetRole(teamComp *s2hv1beta1.Team, namespaceName string) runtime.Object {
 					"",
 				},
 				Resources: []string{
-					"logs",
 					"pods",
+					"pods/log",
 					"services",
 					"endpoints",
 					"serviceaccounts",