Fix pod launcher role permissions to list events in chart (#13649)

When using the KubernetesPodOperator with log_events_on_failure=True, and the pod exits, the executor needs to access the events in the namespace. Before this resulted in an exception when using the chart as this it was not permitted by the pod-launcher role.
apache · Feb 10, 2021 · 90ab60b · 90ab60b
1 parent 9b7852e
commit 90ab60b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/chart/templates/rbac/pod-launcher-role.yaml b/chart/templates/rbac/pod-launcher-role.yaml
@@ -63,4 +63,11 @@ rules:
     verbs:
       - "create"
       - "get"
+  - apiGroups:
+      - ""
+    resources:
+      - "events"
+    verbs:
+      - "list"
+
 {{- end }}