add missing resources to kubescape role

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
kubescape · Dec 12, 2023 · f910440 · f910440
1 parent 5122891
commit f910440
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/charts/kubescape-operator/templates/kubescape/clusterrole.yaml b/charts/kubescape-operator/templates/kubescape/clusterrole.yaml
@@ -6,7 +6,7 @@ metadata:
   name: {{ .Values.kubescape.name }}
 rules:
 - apiGroups: [""]
-  resources: ["pods", "pods/proxy", "namespaces", "secrets", "nodes", "configmaps", "services", "serviceaccounts", "endpoints", "persistentvolumeclaims", "limitranges", "replicationcontrollers", "podtemplates", "resourcequotas", "events"]
+  resources: ["pods", "pods/proxy", "namespaces", "secrets", "nodes", "configmaps", "services", "serviceaccounts", "endpoints", "persistentvolumes", "persistentvolumeclaims", "limitranges", "replicationcontrollers", "podtemplates", "resourcequotas", "events"]
   verbs: ["get", "watch", "list"]
 - apiGroups: ["admissionregistration.k8s.io"]
   resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
@@ -45,7 +45,7 @@ rules:
   resources: ["clusterroles", "clusterrolebindings", "roles", "rolebindings"]
   verbs: ["get", "watch", "list"]
 - apiGroups: ["storage.k8s.io"]
-  resources: ["csistoragecapacities"]
+  resources: ["csistoragecapacities", "StorageClass"]
   verbs: ["get", "watch", "list"]
 - apiGroups: ["networking.k8s.io"]
   resources: ["ingresses"]

diff --git a/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap b/charts/kubescape-operator/tests/__snapshot__/snapshot_test.yaml.snap
@@ -743,6 +743,7 @@ matches the snapshot:
           - services
           - serviceaccounts
           - endpoints
+          - persistentvolumes
           - persistentvolumeclaims
           - limitranges
           - replicationcontrollers
@@ -866,6 +867,7 @@ matches the snapshot:
           - storage.k8s.io
         resources:
           - csistoragecapacities
+          - StorageClass
         verbs:
           - get
           - watch