From 9e4f20d3a399db191caf6c976e7f4caf074dfe79 Mon Sep 17 00:00:00 2001 From: Tomas Nozicka Date: Fri, 5 Mar 2021 17:04:31 +0100 Subject: [PATCH] rbac: Fix patching PVCs --- config/operator/rbac/role.yaml | 1 + examples/common/operator.yaml | 1 + pkg/controllers/cluster/cluster_controller.go | 2 +- 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/config/operator/rbac/role.yaml b/config/operator/rbac/role.yaml index 1eb36410171..e73111a9221 100644 --- a/config/operator/rbac/role.yaml +++ b/config/operator/rbac/role.yaml @@ -30,6 +30,7 @@ rules: - delete - get - list + - patch - update - watch - apiGroups: diff --git a/examples/common/operator.yaml b/examples/common/operator.yaml index 843efc06053..6c7d0a61055 100644 --- a/examples/common/operator.yaml +++ b/examples/common/operator.yaml @@ -1789,6 +1789,7 @@ rules: - delete - get - list + - patch - update - watch - apiGroups: diff --git a/pkg/controllers/cluster/cluster_controller.go b/pkg/controllers/cluster/cluster_controller.go index bed5ee17a0f..4c1e5c377b6 100644 --- a/pkg/controllers/cluster/cluster_controller.go +++ b/pkg/controllers/cluster/cluster_controller.go @@ -92,7 +92,7 @@ func New(ctx context.Context, mgr ctrl.Manager, logger log.Logger) (*ClusterReco // +kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch // +kubebuilder:rbac:groups="",resources=pods,verbs=get;list;watch;delete // +kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;patch;delete -// +kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=get;list;watch;delete;update +// +kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=get;list;watch;delete;update;patch // +kubebuilder:rbac:groups="",resources=persistentvolumes,verbs=get;list;watch // +kubebuilder:rbac:groups="",resources=events,verbs=create;update;patch // +kubebuilder:rbac:groups=apps,resources=statefulsets,verbs=get;list;watch;create;update;patch;delete