Merge b6b42ce49f into cf172edb3f

charts/argo-workflows/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: v3.6.4
 name: argo-workflows
 description: A Helm chart for Argo Workflows
 type: application
-version: 0.45.9
+version: 0.45.10
 icon: https://argo-workflows.readthedocs.io/en/stable/assets/logo.png
 home: https://github.com/argoproj/argo-helm
 sources:
@@ -17,4 +17,4 @@ annotations:
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
   artifacthub.io/changes: |
     - kind: added
-      description: Support additional rules for service account that runs workflows
+      description: Added access to see pod information in argo-workflows

charts/argo-workflows/templates/controller/workflow-aggregate-roles.yaml

@@ -7,6 +7,16 @@ metadata:
     {{- include "argo-workflows.labels" (dict "context" . "component" .Values.controller.name "name" .Values.controller.name) | nindent 4 }}
     rbac.authorization.k8s.io/aggregate-to-view: "true"
 rules:
+- apiGroups:
+    - ""
+  resources:
+    - events
+    - pods
+    - pods/log
+  verbs:
+    - get
+    - list
+    - watch
 - apiGroups:
   - argoproj.io
   resources:
@@ -39,6 +49,16 @@ metadata:
     {{- include "argo-workflows.labels" (dict "context" . "component" .Values.server.name "name" .Values.server.name) | nindent 4 }}
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
 rules:
+- apiGroups:
+    - ""
+  resources:
+    - events
+    - pods
+    - pods/log
+  verbs:
+    - get
+    - list
+    - watch
 - apiGroups:
   - argoproj.io
   resources:
@@ -76,6 +96,16 @@ metadata:
     {{- include "argo-workflows.labels" (dict "context" . "component" .Values.server.name "name" .Values.server.name) | nindent 4 }}
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
 rules:
+- apiGroups:
+    - ""
+  resources:
+    - events
+    - pods
+    - pods/log
+  verbs:
+    - get
+    - list
+    - watch
 - apiGroups:
   - argoproj.io
   resources: