Add additional list, watch rbac for nodes

indeedeng · Dec 4, 2023 · fca181b · fca181b
1 parent ea4795c
commit fca181b
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.1] - 2023-12-04
+### Added
+- Added cluster role permissions for list, watch on nodes
+
 ## [0.6.0] - 2023-12-04
 ### Added
 - Support for authenticating to check if manifests exist for each proxy rule with an image pull secret.

diff --git a/deploy/charts/harbor-container-webhook/Chart.yaml b/deploy/charts/harbor-container-webhook/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: harbor-container-webhook
 description: Webhook to configure pods with harbor proxy cache projects
 type: application
-version: 0.6.0
+version: 0.6.1
 appVersion: "0.6.0"
 kubeVersion: ">= 1.16.0-0"
 home: https://github.com/IndeedEng-alpha/harbor-container-webhook

diff --git a/deploy/charts/harbor-container-webhook/templates/rbac.yaml b/deploy/charts/harbor-container-webhook/templates/rbac.yaml
@@ -8,6 +8,8 @@ rules:
       - nodes
     verbs:
       - get
+      - list
+      - watch
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1