fix: Bug rbac authorization secrets (#125)

Co-authored-by: David MICHENEAU <[email protected]>
orange-cloudavenue · Nov 20, 2024 · 9aadde3 · 9aadde3
1 parent 1b10ca3
commit 9aadde3
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/.changelog/121.txt b/.changelog/121.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+`kimup-controller` - Fix rbac authorization to read secrets.
+```
diff --git a/internal/controller/kimup_controller.go b/internal/controller/kimup_controller.go
@@ -35,6 +35,7 @@ type KimupReconciler struct {
 //+kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups="",resources=pods,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups="",resources=events,verbs=create;patch
+//+kubebuilder:rbac:groups="",resources=secrets,verbs=get
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.

diff --git a/manifests/operator/role.yaml b/manifests/operator/role.yaml
@@ -24,6 +24,12 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
 - apiGroups:
   - admissionregistration.k8s.io
   resources: