Merge pull request #1192 from alphagov/operator-exec

Allow operators to exec into pods
alphagov · Oct 5, 2020 · 3407dd9 · 3407dd9
2 parents 15f563d + 64c06a4
commit 3407dd9
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/charts/gsp-cluster/templates/00-aws-auth/operator-cluster-role.yaml b/charts/gsp-cluster/templates/00-aws-auth/operator-cluster-role.yaml
@@ -36,6 +36,11 @@ rules:
   - patch
   - update
   - watch
+- apiGroups: [""]
+  resources:
+  - pods/exec
+  verbs:
+  - create
 
 - apiGroups: ["access.govsvc.uk"]
   resources:

diff --git a/docs/architecture/adr/ADR043-k8s-resource-access.md b/docs/architecture/adr/ADR043-k8s-resource-access.md
@@ -584,6 +584,11 @@ rules:
   - patch
   - update
   - watch
+- apiGroups: [""]
+  resources:
+  - pods/exec
+  verbs:
+  - create
 
 - apiGroups: ["access.govsvc.uk"]
   resources: