From 44aa1a22ab6bbb0e2f646d22905e0e58b148fd5a Mon Sep 17 00:00:00 2001 From: Hussein Galal Date: Fri, 27 Jun 2025 16:42:05 +0300 Subject: [PATCH] Add pods/attach permission to k3k-kubelet (#400) Signed-off-by: galal-hussein --- pkg/controller/cluster/agent/shared.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/controller/cluster/agent/shared.go b/pkg/controller/cluster/agent/shared.go index a08069d4..7390bbc3 100644 --- a/pkg/controller/cluster/agent/shared.go +++ b/pkg/controller/cluster/agent/shared.go @@ -336,7 +336,7 @@ func (s *SharedAgent) role(ctx context.Context) error { Rules: []rbacv1.PolicyRule{ { APIGroups: []string{""}, - Resources: []string{"persistentvolumeclaims", "pods", "pods/log", "pods/exec", "pods/ephemeralcontainers", "secrets", "configmaps", "services"}, + Resources: []string{"persistentvolumeclaims", "pods", "pods/log", "pods/attach", "pods/exec", "pods/ephemeralcontainers", "secrets", "configmaps", "services"}, Verbs: []string{"*"}, }, {