Merge pull request #1126 from JimBugwadia/update_permissions2

update permissions
kyverno · Aug 13, 2024 · 4b0a662 · 4b0a662
2 parents d4c42e1 + 5189caf
commit 4b0a662
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/other/check-vpa-configuration/.chainsaw-test/chainsaw-test.yaml b/other/check-vpa-configuration/.chainsaw-test/chainsaw-test.yaml
@@ -6,6 +6,8 @@ spec:
   steps:
   - name: 01 - Create policy and Enforce
     try:
+    - apply:
+        file: permissions.yaml
     - apply:
         file: ../check-vpa-configuration.yaml
     - patch:

diff --git a/other/check-vpa-configuration/.chainsaw-test/permissions.yaml b/other/check-vpa-configuration/.chainsaw-test/permissions.yaml
@@ -0,0 +1,17 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kyverno:vpa
+  labels:
+    rbac.kyverno.io/aggregate-to-background-controller: "true"
+    rbac.kyverno.io/aggregate-to-reports-controller: "true"
+    rbac.kyverno.io/aggregate-to-admission-controller: "true"
+rules:
+- apiGroups:
+  - autoscaling.k8s.io
+  resources:
+  - verticalpodautoscalers
+  verbs:
+  - get
+  - list
+  - watch