From 58f0bbb52177202ef9c60747dc4931157ba17a88 Mon Sep 17 00:00:00 2001 From: Alexandre Vilain Date: Tue, 11 Jun 2024 21:24:28 +0200 Subject: [PATCH] fix(rbac): allow controller to delete dynamic config configmap --- config/rbac/role.yaml | 1 + controllers/temporalcluster_controller.go | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 92049a65..34e346cb 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -11,6 +11,7 @@ rules: - configmaps verbs: - create + - delete - get - list - update diff --git a/controllers/temporalcluster_controller.go b/controllers/temporalcluster_controller.go index ec776ae5..44b4f5c1 100644 --- a/controllers/temporalcluster_controller.go +++ b/controllers/temporalcluster_controller.go @@ -71,7 +71,7 @@ type TemporalClusterReconciler struct { } //+kubebuilder:rbac:groups="",resources=services,verbs=get;list;watch;create;update;delete -//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update +//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update;delete //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;delete //+kubebuilder:rbac:groups="",resources=events,verbs=get;create;patch //+kubebuilder:rbac:groups="",resources=serviceaccounts,verbs=get;list;watch;create;update