add get permissions in the rbac only for k8s workloads

rcohencyberarmor · Dec 22, 2022 · edb6eb4 · edb6eb4
1 parent cbabdfc
commit edb6eb4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/kubescape_sneeffer_daemonset.yaml b/kubescape_sneeffer_daemonset.yaml
@@ -11,7 +11,7 @@ metadata:
   namespace: default
 rules:
 - apiGroups: ["*"]
-  resources: ["*"]
+  resources: ["pods", "nodes", "deployments", "daemonsets", "statefulsets", "jobs", "cronjobs", "replicasets"]
   verbs: ["get"]
 - apiGroups: ["*"]
   resources: ["pods"]