maintenance(soteria): grant pod logs and roll out 0.1.0-32

services/maintenance/kustomization.yaml

@@ -51,7 +51,7 @@ images:
   - name: registry.bstein.dev/bstein/metis
     newTag: 0.1.0-9-amd64
   - name: registry.bstein.dev/bstein/soteria
-    newTag: 0.1.0-29 # {"$imagepolicy": "maintenance:soteria:tag"}
+    newTag: 0.1.0-32 # {"$imagepolicy": "maintenance:soteria:tag"}
 configMapGenerator:
   - name: disable-k3s-traefik-script
     namespace: maintenance

services/maintenance/soteria-rbac.yaml

@@ -10,6 +10,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get", "list"]
+  - apiGroups: [""]
+    resources: ["pods/log"]
+    verbs: ["get"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list", "create", "update", "delete"]