From 406dc1b0efea9df12217e59d7d35f2d93553a84a Mon Sep 17 00:00:00 2001
From: Claude AI <claude@thedevops.dev>
Date: Tue, 6 Jan 2026 08:25:02 +0000
Subject: [PATCH] feat(jenkins): Add pods/exec and pods/log permissions for
 health checks

---
 apps/jenkins/rbac.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apps/jenkins/rbac.yaml b/apps/jenkins/rbac.yaml
index 4b40500..b086b4b 100644
--- a/apps/jenkins/rbac.yaml
+++ b/apps/jenkins/rbac.yaml
@@ -12,6 +12,9 @@ rules:
 - apiGroups: [""]
   resources: ["pods", "services", "configmaps", "secrets"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: [""]
+  resources: ["pods/exec", "pods/log"]  # Added for health checks and debugging
+  verbs: ["create", "get"]
 - apiGroups: ["apps"]
   resources: ["deployments", "statefulsets", "daemonsets", "replicasets"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]