Add pods/portforward to role

plexsystems · Mar 6, 2020 · 1ab98c2 · 1ab98c2
1 parent e830362
commit 1ab98c2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -130,7 +130,7 @@ One `ClusterRoleBinding` per name in the `owners` field
 
 |Verbs|API Groups|Resources|
 |---|---|---|
-|*|core|pods, pods/log, services, services/finalizers, endpoints, persistentvolumeclaims, events, configmaps, replicationcontrollers|
+|*|core|pods, pods/log, pods/portforward, services, services/finalizers, endpoints, persistentvolumeclaims, events, configmaps, replicationcontrollers|
 |*|apps|deployments, daemonsets, replicasets, statefulsets|
 |*|autoscaling|horizontalpodautoscalers|
 |*|batch|jobs, cronjobs|

diff --git a/controller/sandbox.go b/controller/sandbox.go
@@ -204,6 +204,7 @@ func getRole(sandbox operatorsv1alpha1.Sandbox) rbacv1.Role {
 				Resources: []string{
 					"pods",
 					"pods/log",
+					"pods/portforward",
 					"services",
 					"services/finalizers",
 					"endpoints",