fix: no permissions for crd list&watch (#7120)

apecloud · Apr 22, 2024 · 66b6c40 · 66b6c40
1 parent 6e2f543
commit 66b6c40
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -10,8 +10,10 @@ rules:
   - customresourcedefinitions
   verbs:
   - get
+  - list
   - patch
   - update
+  - watch
 - apiGroups:
   - apps
   resources:

diff --git a/controllers/apps/component_controller.go b/controllers/apps/component_controller.go
@@ -108,7 +108,7 @@ type ComponentReconciler struct {
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterrolebindings,verbs=get;list;watch
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterrolebindings/status,verbs=get
 
-// +kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=get
+// +kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=get;list;watch
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

diff --git a/deploy/helm/config/rbac/role.yaml b/deploy/helm/config/rbac/role.yaml
@@ -10,8 +10,10 @@ rules:
   - customresourcedefinitions
   verbs:
   - get
+  - list
   - patch
   - update
+  - watch
 - apiGroups:
   - apps
   resources:
-Original file line number
+Diff line change
@@ Expand Up / @@ -10,8 +10,10 @@ rules: @@
       - customresourcedefinitions
       verbs:
       - get
+      - list
       - patch
       - update
+      - watch
     - apiGroups:
       - apps
       resources:
@@ Expand Down @@