Update service acount

synthesized-io · Sep 21, 2023 · 40fc2e6 · 40fc2e6
1 parent 35d4d08
commit 40fc2e6
Showing 1 changed file with 20 additions and 11 deletions.
diff --git a/schema.yaml b/schema.yaml
@@ -88,17 +88,26 @@ properties:
   serviceAccount:
     type: string
     title: Service account used by all instances
-    x-google-marketplace:
-      type: SERVICE_ACCOUNT
-      serviceAccount:
-        description: Service account used by all instances
-        roles:
-          - type: ClusterRole
-            rulesType: CUSTOM
-            rules:
-              - apiGroups: [""]
-                resources: ["nodes","pods","services"]
-                verbs: ["get", "list", "watch"]
+  x-google-marketplace:
+    type: SERVICE_ACCOUNT
+    serviceAccount:
+      description: Service account used by Synthesized SDK deployment
+      roles:
+        - type: ClusterRole
+          rulesType: CUSTOM
+          rules:
+            - apiGroups: [ "" ]
+              resources: [ "pods", "serviceaccounts" ]
+              verbs: [ "get", "list" ]
+            - apiGroups: [ "extensions" ]
+              resources: [ "deployments" ]
+              verbs: [ "get", "list" ]
+            - apiGroups: [ "apps" ]
+              resources: [ "deployments" ]
+              verbs: [ "get", "list" ]
+            - apiGroups: [ "" ]
+              resources: [ "pods/exec" ]
+              verbs: [ "create", "get" ]
   redis.password:
     type: string
     x-google-marketplace: