Add service permission to member role

Change-Id: Iab5f566ce4cbadb1df6cfa1c57756b6c66e0e1e2

charts/rbac/templates/clusterrole-members.yaml

@@ -18,9 +18,17 @@ kind: ClusterRole
 metadata:
   name: rbac-members
 rules:
-# List and get configmap, pv & pvc and namespaces, nodes & pods & pod logs
+# List and get configmap, pv & pvc and namespaces, nodes & pods & pod logs & services
 - apiGroups: [""]
-  resources: ["configmaps", "nodes", "namespaces", "persistentvolumeclaims", "persistentvolumes", "pods", "pods/log"]
+  resources:
+  - "configmaps"
+  - "nodes"
+  - "namespaces"
+  - "persistentvolumeclaims"
+  - "persistentvolumes"
+  - "pods"
+  - "pods/log"
+  - "services"
   verbs: ["get", "list", "watch"]
 # List all get applications
 - apiGroups: ["apps"]

playbooks/functional.yaml

@@ -146,4 +146,10 @@
     - name: Ensure listing configmaps works
       shell: kubectl --context=test get configmaps
     - name: Ensure getting a configmap works
-      shell: kubectl --context=test get configmap test
+      shell: kubectl --context=test get configmap test
+
+    # List and get service
+    - name: Ensure listing services works
+      shell: kubectl --context=test get services
+    - name: Ensure getting a configmap works
+      shell: kubectl --context=test get service kubernetes