Skip to content

Commit 6f54524

Browse files
committed
add rule for execing into team53 pod
1 parent f604130 commit 6f54524

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

wrongsecrets-balancer/src/kubernetes.js

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1811,6 +1811,14 @@ const createRoleForWebTop = async (team) => {
18111811
apiGroups: [''],
18121812
resources: ['configmaps'],
18131813
verbs: ['get', 'list'],
1814+
},
1815+
{
1816+
apiGroups: [''],
1817+
resources: ['pods/exec'],
1818+
verbs: ['create'],
1819+
resourceNames: [
1820+
`t-${team}-secret-challenge-53*`,
1821+
],
18141822
},
18151823
{
18161824
apiGroups: [''],

0 commit comments

Comments
 (0)