add cluster role for updating prometheus volume size

truefoundry · Sep 5, 2024 · 2be826f · 2be826f
1 parent 843cea7
commit 2be826f
Showing 1 changed file with 14 additions and 2 deletions.
diff --git a/charts/tfy-agent/templates/tfy-agent-proxy-clusterrole-cs.yaml b/charts/tfy-agent/templates/tfy-agent-proxy-clusterrole-cs.yaml
@@ -8,13 +8,25 @@ rules:
   {{- if or .Values.config.allowedNamespaces .Values.tfyAgentProxy.clusterRole.strictMode }}
   {{- if not .Values.config.allowedNamespaces }}
   - apiGroups: [""]
-    resources: ["namespaces"]
-    verbs: ["create"]
+    resources: ["namespaces", "pods"]
+    verbs: ["create", "get"]
   {{- end }}
   - apiGroups: ["storage.k8s.io"]
     resources: ["storageclasses"]
     verbs: ["get", "list"]
 
+  - apiGroups: [""]
+    resources: ["persistentvolumeclaims"]
+    verbs: ["patch"]
+
+  - apiGroups: ["apps"]
+    resources: ["statefulsets"]
+    verbs: ["delete"]
+
+  - apiGroups: ["monitoring.coreos.com"]
+    resources: ["prometheuses"]
+    verbs: ["patch"]
+
   - apiGroups: ["networking.istio.io"]
     resources: ["virtualservices"]
     verbs: ["list"]