From f51cbd01bf5e25767abe16ceeef8158998239519 Mon Sep 17 00:00:00 2001 From: Max Williams Date: Fri, 1 Feb 2019 11:00:31 +0100 Subject: [PATCH] [stable/drone] adding permission to update deployments for pipeline clusterrole (#11036) Signed-off-by: Max Williams --- stable/drone/Chart.yaml | 2 +- stable/drone/templates/role-pipeline.yaml | 24 ++++++++++++++++------- 2 files changed, 18 insertions(+), 8 deletions(-) diff --git a/stable/drone/Chart.yaml b/stable/drone/Chart.yaml index b61a1a4b26..229aaa3bbd 100644 --- a/stable/drone/Chart.yaml +++ b/stable/drone/Chart.yaml @@ -1,7 +1,7 @@ name: drone home: https://drone.io/ icon: https://drone.io/apple-touch-icon.png -version: 2.0.0-rc.5 +version: 2.0.0-rc.6 appVersion: 1.0.0-rc.4 description: Drone is a Continuous Delivery system built on container technology keywords: diff --git a/stable/drone/templates/role-pipeline.yaml b/stable/drone/templates/role-pipeline.yaml index b61cdf94a1..da266049a5 100644 --- a/stable/drone/templates/role-pipeline.yaml +++ b/stable/drone/templates/role-pipeline.yaml @@ -9,6 +9,16 @@ metadata: release: "{{ .Release.Name }}" heritage: "{{ .Release.Service }}" rules: + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - patch + - update - apiGroups: - "" resources: @@ -17,15 +27,15 @@ rules: - secrets - pods verbs: - - "create" - - "delete" - - "get" - - "list" - - "watch" + - create + - delete + - get + - list + - watch - apiGroups: - "" resources: - - "pods/log" + - pods/log verbs: - - "get" + - get {{ end }}