jsonnet: add role for pods and jobs

observatorium · May 12, 2020 · 9d8dc4b · 9d8dc4b
1 parent 44c6bea
commit 9d8dc4b
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 0 deletions.
diff --git a/examples/manifests/role.yaml b/examples/manifests/role.yaml
@@ -19,6 +19,21 @@ rules:
   - get
   - create
   - update
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - create
+  - delete
+  - get
 - apiGroups:
   - apps
   resources:

diff --git a/jsonnet/lib/thanos-receive-controller.libsonnet b/jsonnet/lib/thanos-receive-controller.libsonnet
@@ -48,6 +48,18 @@ local k = import 'ksonnet/ksonnet.beta.4/k.libsonnet';
       ]) +
       rules.withVerbs(['list', 'watch', 'get', 'create', 'update']),
       rules.new() +
+      rules.withApiGroups(['']) +
+      rules.withResources([
+        'pods',
+      ]) +
+      rules.withVerbs(['list', 'watch']),
+      rules.new() +
+      rules.withApiGroups(['batch']) +
+      rules.withResources([
+        'jobs',
+      ]) +
+      rules.withVerbs(['create', 'delete', 'get']),
+      rules.new() +
       rules.withApiGroups(['apps']) +
       rules.withResources([
         'statefulsets',