workout

Author: g-bgg

.github/workflows/release.yaml

@@ -16,8 +16,8 @@ env:
   GH_REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
   RELEASE_VERSION: ${{ github.ref_name }}
-  SCANNER_IMG_VERSION: v1.0.10
-  SNIFFER_IMG_VERSION: v1.1.8
+  SCANNER_IMG_VERSION: v1.0.11
+  SNIFFER_IMG_VERSION: v1.1.9
 
 jobs:
   goreleaser:

rbac/cluster-role.yaml

@@ -0,0 +1,33 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: netassert
+rules:
+- apiGroups:
+  - ""
+  - "apps"
+  resources:
+  - deployments
+  - statefulsets
+  - daemonsets
+  - pods
+  verbs:
+  - get
+##
+- apiGroups:
+  - ""
+  - "apps"
+  resources:
+  - replicasets
+  - pods
+  verbs:
+  - list
+##
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/ephemeralcontainers
+  verbs:
+  - watch
+  - patch

rbac/cluster-rolebinding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: netassert
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: netassert
+subjects:
+- apiGroup: rbac.authorization.k8s.io
+  kind: User
+  name: netassert-user