Adding namespaces read permissions to eksa controller (#8017)

aws · Apr 19, 2024 · 18edabc · 18edabc
1 parent 5831074
commit 18edabc
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/config/manifest/eksa-components.yaml b/config/manifest/eksa-components.yaml
@@ -7115,6 +7115,8 @@ rules:
   verbs:
   - create
   - delete
+  - get
+  - list
 - apiGroups:
   - ""
   resources:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -29,6 +29,8 @@ rules:
   verbs:
   - create
   - delete
+  - get
+  - list
 - apiGroups:
   - ""
   resources:

diff --git a/controllers/cluster_controller.go b/controllers/cluster_controller.go
@@ -172,7 +172,7 @@ func (r *ClusterReconciler) SetupWithManager(mgr ctrl.Manager, log logr.Logger)
 // +kubebuilder:rbac:groups="",resources=events,verbs=create;patch;update
 // +kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;delete;update;patch
 // +kubebuilder:rbac:groups="",namespace=eksa-system,resources=secrets,verbs=patch;update
-// +kubebuilder:rbac:groups="",resources=namespaces,verbs=create;delete
+// +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list;create;delete
 // +kubebuilder:rbac:groups="",resources=nodes,verbs=list
 // +kubebuilder:rbac:groups=addons.cluster.x-k8s.io,resources=clusterresourcesets,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=anywhere.eks.amazonaws.com,resources=clusters;gitopsconfigs;snowmachineconfigs;snowdatacenterconfigs;snowippools;vspheredatacenterconfigs;vspheremachineconfigs;dockerdatacenterconfigs;tinkerbellmachineconfigs;tinkerbelltemplateconfigs;tinkerbelldatacenterconfigs;cloudstackdatacenterconfigs;cloudstackmachineconfigs;nutanixdatacenterconfigs;nutanixmachineconfigs;awsiamconfigs;oidcconfigs;awsiamconfigs;fluxconfigs,verbs=get;list;watch;update;patch
-Original file line number
+Diff line change
@@ Expand Up / @@ -7115,6 +7115,8 @@ rules: @@
       verbs:
       - create
       - delete
+      - get
+      - list
     - apiGroups:
       - ""
       resources:
@@ Expand Down @@