From 0612ea45925a321d77d5978f43e4a8d97941907c Mon Sep 17 00:00:00 2001 From: Fabio Bertinatto Date: Tue, 13 Apr 2021 12:38:01 +0200 Subject: [PATCH] Add missing RBAC rules for vSphere. The operator needs to watch the proxies resource and update the clustercsidriver's spec. This patch adds the missing RBAC rules that allow those actions. --- assets/csidriveroperators/vsphere/06_clusterrole.yaml | 4 ++++ pkg/generated/bindata.go | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/assets/csidriveroperators/vsphere/06_clusterrole.yaml b/assets/csidriveroperators/vsphere/06_clusterrole.yaml index 0c625e348..1d10218ee 100644 --- a/assets/csidriveroperators/vsphere/06_clusterrole.yaml +++ b/assets/csidriveroperators/vsphere/06_clusterrole.yaml @@ -19,6 +19,9 @@ rules: - get - list - watch + # The Config Observer controller updates the CR's spec + - update + - patch - apiGroups: - operator.openshift.io resources: @@ -252,6 +255,7 @@ rules: - config.openshift.io resources: - infrastructures + - proxies verbs: - get - list diff --git a/pkg/generated/bindata.go b/pkg/generated/bindata.go index 8271b230a..90ce77dc5 100644 --- a/pkg/generated/bindata.go +++ b/pkg/generated/bindata.go @@ -3549,6 +3549,9 @@ rules: - get - list - watch + # The Config Observer controller updates the CR's spec + - update + - patch - apiGroups: - operator.openshift.io resources: @@ -3782,6 +3785,7 @@ rules: - config.openshift.io resources: - infrastructures + - proxies verbs: - get - list