From 964c48afd0b5359e975b091dd0e334957ec5abfb Mon Sep 17 00:00:00 2001
From: Alex Monk <alex.monk@digital.cabinet-office.gov.uk>
Date: Fri, 25 Sep 2020 11:24:41 +0100
Subject: [PATCH] Allow operators to exec into pods

---
 .../templates/00-aws-auth/operator-cluster-role.yaml         | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/charts/gsp-cluster/templates/00-aws-auth/operator-cluster-role.yaml b/charts/gsp-cluster/templates/00-aws-auth/operator-cluster-role.yaml
index 1364c64d0..f3494de1e 100644
--- a/charts/gsp-cluster/templates/00-aws-auth/operator-cluster-role.yaml
+++ b/charts/gsp-cluster/templates/00-aws-auth/operator-cluster-role.yaml
@@ -36,6 +36,11 @@ rules:
   - patch
   - update
   - watch
+- apiGroups: [""]
+  resources:
+  - pods/exec
+  verbs:
+  - create
 
 - apiGroups: ["access.govsvc.uk"]
   resources: