fix: update YAML/Helm permissions -- add list and get

Add the "get" and "list" verbs that are missing for some resources/workloads.
The Informer API requires the "list" permission otherwise K8s API Server returns 403 Forbidden.

Author: ivanstanev

snyk-monitor-cluster-permissions.yaml

@@ -11,20 +11,24 @@ rules:
   resources:
   - pods
   verbs:
+  - get
   - list
   - watch
 - apiGroups:
   - ""
   resources:
   - namespaces
   verbs:
+  - get
+  - list
   - watch
 - apiGroups:
   - ""
   resources:
   - replicationcontrollers
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - batch
@@ -33,6 +37,7 @@ rules:
   - jobs
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - apps
@@ -43,6 +48,7 @@ rules:
   - statefulsets
   verbs:
   - get
+  - list
   - watch
 ---
 kind: ServiceAccount

snyk-monitor-namespaced-permissions.yaml

@@ -11,6 +11,7 @@ rules:
   resources:
   - pods
   verbs:
+  - get
   - list
   - watch
 - apiGroups:
@@ -19,6 +20,7 @@ rules:
   - replicationcontrollers
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - batch
@@ -27,6 +29,7 @@ rules:
   - jobs
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - apps
@@ -37,6 +40,7 @@ rules:
   - statefulsets
   verbs:
   - get
+  - list
   - watch
 ---
 kind: ServiceAccount

snyk-monitor/templates/clusterrole.yaml

@@ -14,20 +14,24 @@ rules:
   resources:
   - pods
   verbs:
+  - get
   - list
   - watch
 - apiGroups:
   - ""
   resources:
   - namespaces
   verbs:
+  - get
+  - list
   - watch
 - apiGroups:
   - ""
   resources:
   - replicationcontrollers
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - batch
@@ -36,6 +40,7 @@ rules:
   - jobs
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - apps
@@ -46,5 +51,6 @@ rules:
   - statefulsets
   verbs:
   - get
+  - list
   - watch
 {{- end }}

snyk-monitor/templates/role.yaml

@@ -14,6 +14,7 @@ rules:
   resources:
   - pods
   verbs:
+  - get
   - list
   - watch
 - apiGroups:
@@ -28,6 +29,7 @@ rules:
   - replicationcontrollers
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - batch
@@ -36,6 +38,7 @@ rules:
   - jobs
   verbs:
   - get
+  - list
   - watch
 - apiGroups:
   - apps
@@ -46,5 +49,6 @@ rules:
   - statefulsets
   verbs:
   - get
+  - list
   - watch
 {{- end }}