From 125eb9ac5304c6f202ec2e7b72eaea8616119c86 Mon Sep 17 00:00:00 2001 From: Sergio Garcia <38561120+sergargar@users.noreply.github.com> Date: Tue, 9 Apr 2024 10:45:58 +0200 Subject: [PATCH] fix(k8s): improve kubernetes deployment (#3713) --- job.yaml => kubernetes/job.yaml | 4 ++-- prowler-role.yaml => kubernetes/prowler-role.yaml | 2 +- .../prowler-rolebinding.yaml | 0 3 files changed, 3 insertions(+), 3 deletions(-) rename job.yaml => kubernetes/job.yaml (97%) rename prowler-role.yaml => kubernetes/prowler-role.yaml (84%) rename prowler-rolebinding.yaml => kubernetes/prowler-rolebinding.yaml (100%) diff --git a/job.yaml b/kubernetes/job.yaml similarity index 97% rename from job.yaml rename to kubernetes/job.yaml index 77fe47a1aa..e9e4e00d15 100644 --- a/job.yaml +++ b/kubernetes/job.yaml @@ -10,10 +10,10 @@ spec: spec: containers: - name: prowler - image: docker.io/prowler/kubernetes + image: toniblyx/prowler:stable command: ["prowler"] args: ["kubernetes", "-z"] - imagePullPolicy: Never + imagePullPolicy: Always volumeMounts: - name: var-lib-cni mountPath: /var/lib/cni diff --git a/prowler-role.yaml b/kubernetes/prowler-role.yaml similarity index 84% rename from prowler-role.yaml rename to kubernetes/prowler-role.yaml index 7acb69e0b8..e5ab19777b 100644 --- a/prowler-role.yaml +++ b/kubernetes/prowler-role.yaml @@ -4,7 +4,7 @@ metadata: name: prowler-read-cluster rules: - apiGroups: [""] - resources: ["pods", "configmaps", "nodes"] + resources: ["pods", "configmaps", "nodes", "namespaces"] verbs: ["get", "list", "watch"] - apiGroups: ["rbac.authorization.k8s.io"] resources: ["clusterrolebindings", "rolebindings", "clusterroles", "roles"] diff --git a/prowler-rolebinding.yaml b/kubernetes/prowler-rolebinding.yaml similarity index 100% rename from prowler-rolebinding.yaml rename to kubernetes/prowler-rolebinding.yaml