Skip to content

Commit

Permalink
Allow access role to access pods (#20454)
Browse files Browse the repository at this point in the history
This PR adds full access to `pod` resources on every namespace for
default role `access`.

Fixes #20401
  • Loading branch information
tigrato authored Jan 20, 2023
1 parent 18dc57b commit 9506c02
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions lib/services/presets.go
Original file line number Diff line number Diff line change
Expand Up @@ -113,6 +113,13 @@ func NewPresetAccessRole() types.Role {
DatabaseLabels: types.Labels{types.Wildcard: []string{types.Wildcard}},
DatabaseNames: []string{teleport.TraitInternalDBNamesVariable},
DatabaseUsers: []string{teleport.TraitInternalDBUsersVariable},
KubernetesResources: []types.KubernetesResource{
{
Kind: types.KindKubePod,
Namespace: types.Wildcard,
Name: types.Wildcard,
},
},
Rules: []types.Rule{
types.NewRule(types.KindEvent, RO()),
{
Expand Down

0 comments on commit 9506c02

Please sign in to comment.