Merge pull request #18 from almaslennikov/rbac-fix-cfgmap

Add cfgmap permissions to RBAC
Mellanox · Oct 1, 2024 · aac12d1 · aac12d1
2 parents 0463dbc + 87ff213
commit aac12d1
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -4,6 +4,12 @@ kind: ClusterRole
 metadata:
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
 - apiGroups:
   - ""
   resources:

diff --git a/deployment/nic-configuration-operator-chart/templates/role.yaml b/deployment/nic-configuration-operator-chart/templates/role.yaml
@@ -5,6 +5,12 @@ metadata:
   labels:
     {{- include "nic-configuration-operator.labels" . | nindent 4}}
 rules:
+- apiGroups:
+    - ""
+  resources:
+    - configmaps
+  verbs:
+    - get
 - apiGroups:
     - ""
   resources:

diff --git a/internal/controller/nicconfigurationtemplate_controller.go b/internal/controller/nicconfigurationtemplate_controller.go
@@ -54,6 +54,7 @@ type NicConfigurationTemplateReconciler struct {
 //+kubebuilder:rbac:groups=configuration.net.nvidia.com,resources=nicdevices,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=configuration.net.nvidia.com,resources=nicdevices/finalizers,verbs=update
 //+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch;update;patch
+//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get
 //+kubebuilder:rbac:groups="",resources=pods,verbs=list
 //+kubebuilder:rbac:groups="",resources=pods/eviction,verbs=create;delete;get;list;patch;update;watch
 //+kubebuilder:rbac:groups=maintenance.nvidia.com,resources=nodemaintenances,verbs=get;list;watch;create;update;patch;delete