fix psp fix (#134)

Co-authored-by: Joe Stephenson <[email protected]>
storageos · May 16, 2022 · 155d29e · 155d29e
1 parent 4542741
commit 155d29e
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 6 deletions.
diff --git a/config/rbac/bases/role.yaml b/config/rbac/bases/role.yaml
@@ -6,12 +6,6 @@ metadata:
   creationTimestamp: null
   name: storageos-api-manager
 rules:
-- apiGroups:
-  - extensions
-  resources:
-  - podsecuritypolicies
-  verbs:
-  - use
 - apiGroups:
   - ""
   resources:
@@ -190,6 +184,12 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - extensions
+  resources:
+  - podsecuritypolicies
+  verbs:
+  - use
 - apiGroups:
   - storage.k8s.io
   resources:

diff --git a/main.go b/main.go
@@ -94,6 +94,7 @@ func init() {
 // +kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups="",resources=configmaps/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups="coordination.k8s.io",resources=leases,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups="extensions",resources=podsecuritypolicies,verbs=use
 
 func main() {
 	var loggerOpts zap.Options