From b95f19279d3fc9a5e4abda532769acb4eb7d4b85 Mon Sep 17 00:00:00 2001 From: Yishay Nadav Date: Wed, 24 Dec 2025 12:19:52 +0200 Subject: [PATCH] add registry viewer permisssons --- charts/konnector/Chart.yaml | 2 +- charts/konnector/values.yaml | 8 ++++++-- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/charts/konnector/Chart.yaml b/charts/konnector/Chart.yaml index dcb4344..3e56f5a 100644 --- a/charts/konnector/Chart.yaml +++ b/charts/konnector/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: konnector description: Deploys Palo Alto Networks' Cortex KSPM connector for advanced Kubernetes security posture management. type: application -version: 1.0.24-rc.3 +version: 1.0.24-rc.4 appVersion: "1.0.0" maintainers: - name: Palo Alto Networks - Cortex KSPM team diff --git a/charts/konnector/values.yaml b/charts/konnector/values.yaml index 1be6e01..7fa65fe 100644 --- a/charts/konnector/values.yaml +++ b/charts/konnector/values.yaml @@ -41,7 +41,7 @@ priorityClassValues: name: "cortex-critical" value: 1000000 high: - name: "cortex-high" # The default value for workloads without priority class defined + name: "cortex-high" # The default value for workloads without priority class defined value: 900000 # ========================== @@ -214,10 +214,14 @@ system: roleRef: apiGroup: security.openshift.io/v1 name: system:openshift:scc:privileged - konnector-openshift-registry: + konnector-openshift-registry-puller: roleRef: apiGroup: rbac.authorization.k8s.io/v1 name: system:image-puller + konnector-openshift-registry-viewer: + roleRef: + apiGroup: rbac.authorization.k8s.io/v1 + name: registry-viewer # ========================== # Secrets Resources