Add RBAC for logs / namespaces / endpoint invocation
Adds RBAC permissions for the openfaas-operator to bring it in
line with faas-netes:
pod listing and logs for log streaming
endpoint listing for invocation via proxy
namespace listing for future namespace work
@@ -38,6 +38,9 @@ rules:
- apiGroups: ["certmanager.k8s.io"]
resources: ["certificates"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: [""]
+ resources: ["pods", "pods/log", "namespaces", "endpoints"]
+ verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
