fix: add missing rbac

apecloud · Jan 22, 2025 · 2ac7b7d · 2ac7b7d
1 parent 15563c0
commit 2ac7b7d
Show file tree

Hide file tree

Showing 5 changed files with 53 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -881,6 +881,20 @@ rules:
   - rolebindings/status
   verbs:
   - get
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles/status
+  verbs:
+  - get
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:

diff --git a/controllers/apps/component/component_controller.go b/controllers/apps/component/component_controller.go
@@ -99,6 +99,9 @@ type ComponentReconciler struct {
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings/status,verbs=get
 
+// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles,verbs=get;list;watch
+// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles/status,verbs=get
+
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.
 //

diff --git a/deploy/helm/config/rbac/role.yaml b/deploy/helm/config/rbac/role.yaml
@@ -881,6 +881,20 @@ rules:
   - rolebindings/status
   verbs:
   - get
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles/status
+  verbs:
+  - get
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:

diff --git a/deploy/helm/templates/rbac/rbac_manager_role.yaml b/deploy/helm/templates/rbac/rbac_manager_role.yaml
@@ -42,6 +42,25 @@ rules:
   - list
   - patch
   - update
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - roles/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:

diff --git a/deploy/helm/values.yaml b/deploy/helm/values.yaml
@@ -56,6 +56,9 @@ fullnameOverride: ""
 ##   groups=core,resources=serviceaccounts/status,verbs=get;update;patch
 ##   groups=core,resources=serviceaccounts/finalizers,verbs=update
 ##
+##   groups=rbac.authorization.k8s.io,resources=roles,verbs=get;list;watch;create;update;patch;delete
+##   groups=rbac.authorization.k8s.io,resources=roles/status,verbs=get;update;patch
+##
 ##   groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;create;update;patch;delete
 ##   groups=rbac.authorization.k8s.io,resources=rolebindings/status,verbs=get;update;patch
 ##   groups=rbac.authorization.k8s.io,resources=rolebindings/finalizers,verbs=update