Add permissions for pods/logs to the manageiq-automation role

Fixes: cannot get resource "pods/log" in API group "" in the namespace...
bdunne · Oct 10, 2023 · 77f6a15 · 77f6a15
1 parent 72de19d
commit 77f6a15
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/manageiq-operator/api/v1alpha1/helpers/miq-components/rbac.go b/manageiq-operator/api/v1alpha1/helpers/miq-components/rbac.go
@@ -73,6 +73,11 @@ func AutomationRole(cr *miqv1alpha1.ManageIQ, scheme *runtime.Scheme) (*rbacv1.R
 				Resources: []string{"pods", "secrets"},
 				Verbs:     []string{"create", "delete", "get", "list", "patch", "update", "watch"},
 			},
+			rbacv1.PolicyRule{
+				APIGroups: []string{""},
+				Resources: []string{"pods/logs"},
+				Verbs:     []string{"get"},
+			},
 		}
 
 		return nil