From ad65a12b668afc1212da12ef8fc01965e1b08ac7 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Wed, 27 Dec 2023 15:33:36 -0600
Subject: [PATCH] jenkins: Allow Jenkins to read pod logs

Jenkins needs permission to read pod logs so it can display output from
the JNLP agent if it crashes.
---
 jenkins/jenkins.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/jenkins/jenkins.yaml b/jenkins/jenkins.yaml
index d89052b..90eb488 100644
--- a/jenkins/jenkins.yaml
+++ b/jenkins/jenkins.yaml
@@ -74,6 +74,12 @@ rules:
   - pods/exec
   verbs:
   - '*'
+- apiGroups:
+  - ''
+  resources:
+  - pods/log
+  verbs:
+  - get
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1