Merge pull request #1552 from alphagov/dj-maisy/kubectl-poweruser-nam…

…espaces Allow GOV.UK "Power Users" to list k8s Namespaces
alphagov · Dec 18, 2024 · ba59b38 · ba59b38
2 parents 8334b71 + 9db81f0
commit ba59b38
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/terraform/deployments/cluster-services/aws_auth_configmap.tf b/terraform/deployments/cluster-services/aws_auth_configmap.tf
@@ -127,11 +127,18 @@ resource "kubernetes_cluster_role_binding" "read_crs_and_crbs" {
 
 resource "kubernetes_cluster_role" "poweruser" {
   metadata { name = "poweruser" }
+
   rule {
     api_groups = ["*"]
     resources  = ["*"]
     verbs      = ["*"]
   }
+
+  rule {
+    api_groups = [""]
+    resources  = ["namespaces"]
+    verbs      = ["get", "list"]
+  }
 }
 
 resource "kubernetes_role_binding" "poweruser" {