🐛 [patch] Correct pods/log permission (#4)

zinref · Pohfy123 · commit 92b88ca8a46e · 2020-03-19T17:04:13.000+07:00
diff --git a/Makefile b/Makefile
@@ -490,7 +490,7 @@ manifests: controller-gen
 
 # Generate code
 generate: controller-gen
-	$(CONTROLLER_GEN) object:headerFile=./hack/boilerplate.go.txt paths="./..."
+	$(CONTROLLER_GEN) object:headerFile=./builder/boilerplate.go.txt paths="./..."
 
 # find or download controller-gen
 # download controller-gen if necessary
diff --git a/builder/boilerplate.go.txt b/builder/boilerplate.go.txt
diff --git a/config/chart/samsahai/templates/clusterrole-rbac.yaml b/config/chart/samsahai/templates/clusterrole-rbac.yaml
@@ -29,9 +29,9 @@ rules:
       - bindings
       - configmaps
       - limitranges
-      - logs
       - persistentvolumeclaims
       - pods
+      - pods/log
       - namespaces
       - resourcequotas
       - services
diff --git a/internal/samsahai/k8sobject/object.go b/internal/samsahai/k8sobject/object.go
@@ -276,8 +276,8 @@ func GetRole(teamComp *s2hv1beta1.Team, namespaceName string) runtime.Object {
 					"",
 				},
 				Resources: []string{
-					"logs",
 					"pods",
+					"pods/log",
 					"services",
 					"endpoints",
 					"serviceaccounts",
