From b88e178ec30cb3e5e041640b0b1285459828fd35 Mon Sep 17 00:00:00 2001 From: CTO Agent Date: Sun, 19 Jul 2026 13:51:06 +0000 Subject: [PATCH] fix(dozzle): add nodes permission to ClusterRole for k8s mode Dozzle running in k8s mode requires permission to list nodes at cluster scope. Without this permission, the pod fails with error: "nodes is forbidden: User \"system:serviceaccount:dozzle:dozzle\" cannot list resource \"nodes\" in API group \"\" at the cluster scope" This change adds the nodes resource with get, list, and watch verbs to the ClusterRole, allowing Dozzle to discover all nodes in the cluster when running in k8s/swarm mode. Resolves: DEV-349 Co-Authored-By: Paperclip --- apps/dozzle/service-account.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/apps/dozzle/service-account.yaml b/apps/dozzle/service-account.yaml index 08bc556..e8d2fb6 100644 --- a/apps/dozzle/service-account.yaml +++ b/apps/dozzle/service-account.yaml @@ -25,6 +25,14 @@ rules: verbs: - get - list +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding