Fix RBAC permissions for adding/removing finalizers

projectsyn · Dec 7, 2023 · c24ff4b · c24ff4b
1 parent 724f001
commit c24ff4b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -11,6 +11,8 @@ rules:
   verbs:
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
   - syn.tools

diff --git a/controllers/cluster_controller.go b/controllers/cluster_controller.go
@@ -60,7 +60,7 @@ type ClusterReconciler struct {
 	KeycloakClientIgnorePaths []string
 }
 
-//+kubebuilder:rbac:groups=syn.tools,resources=clusters,verbs=get;list;watch
+//+kubebuilder:rbac:groups=syn.tools,resources=clusters,verbs=get;list;watch;update;patch
 //+kubebuilder:rbac:groups=syn.tools,resources=clusters/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=syn.tools,resources=clusters/finalizers,verbs=update
-Original file line number
+Diff line change
@@ Expand Up / @@ -11,6 +11,8 @@ rules: @@
       verbs:
       - get
       - list
+      - patch
+      - update
       - watch
     - apiGroups:
       - syn.tools
@@ Expand Down @@