add policy rule for list and delete pods (#1319)

grafana · Jan 27, 2022 · 6dfbdfd · 6dfbdfd
1 parent 89fb382
commit 6dfbdfd
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/production/tanka/grafana-agent/smoke/main.libsonnet b/production/tanka/grafana-agent/smoke/main.libsonnet
@@ -26,6 +26,9 @@ local deployment = k.apps.v1.deployment;
                 policyRule.withApiGroups(['apps']) +
                 policyRule.withResources(['deployments/scale']) +
                 policyRule.withVerbs(['get', 'update']),
+                policyRule.withApiGroups(['']) +
+                policyRule.withResources(['pods']) +
+                policyRule.withVerbs(['list', 'delete']),
             ]) {
                 service_account+:
                   serviceAccount.mixin.metadata.withNamespace(namespace),