diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index d0d4f18..ec4e5a2 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -4,6 +4,12 @@ kind: ClusterRole metadata: name: manager-role rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get - apiGroups: - "" resources: diff --git a/deployment/nic-configuration-operator-chart/templates/role.yaml b/deployment/nic-configuration-operator-chart/templates/role.yaml index e1f4698..fbffac7 100644 --- a/deployment/nic-configuration-operator-chart/templates/role.yaml +++ b/deployment/nic-configuration-operator-chart/templates/role.yaml @@ -5,6 +5,12 @@ metadata: labels: {{- include "nic-configuration-operator.labels" . | nindent 4}} rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - get - apiGroups: - "" resources: diff --git a/internal/controller/nicconfigurationtemplate_controller.go b/internal/controller/nicconfigurationtemplate_controller.go index 4e42d60..9cec4df 100644 --- a/internal/controller/nicconfigurationtemplate_controller.go +++ b/internal/controller/nicconfigurationtemplate_controller.go @@ -54,6 +54,7 @@ type NicConfigurationTemplateReconciler struct { //+kubebuilder:rbac:groups=configuration.net.nvidia.com,resources=nicdevices,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=configuration.net.nvidia.com,resources=nicdevices/finalizers,verbs=update //+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch;update;patch +//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get //+kubebuilder:rbac:groups="",resources=pods,verbs=list //+kubebuilder:rbac:groups="",resources=pods/eviction,verbs=create;delete;get;list;patch;update;watch //+kubebuilder:rbac:groups=maintenance.nvidia.com,resources=nodemaintenances,verbs=get;list;watch;create;update;patch;delete