From 73357a60ae313d6d70059851cd5903ca3313d7c1 Mon Sep 17 00:00:00 2001 From: Pierangelo Di Pilato Date: Thu, 30 Jan 2025 17:37:56 +0100 Subject: [PATCH] Add `sinks.knative.dev` to namespaced ClusterRole (#8432) These are roles that users can use to give their developers access to Knative Eventing resources and we're missing the sinks group. Signed-off-by: Pierangelo Di Pilato --- config/core/roles/clusterrole-namespaced.yaml | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/config/core/roles/clusterrole-namespaced.yaml b/config/core/roles/clusterrole-namespaced.yaml index 91f3fdfe816..d1f6bae5121 100644 --- a/config/core/roles/clusterrole-namespaced.yaml +++ b/config/core/roles/clusterrole-namespaced.yaml @@ -79,6 +79,19 @@ rules: --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: knative-sinks-namespaced-admin + labels: + rbac.authorization.k8s.io/aggregate-to-admin: "true" + app.kubernetes.io/version: devel + app.kubernetes.io/name: knative-eventing +rules: + - apiGroups: ["sinks.knative.dev"] + resources: ["*"] + verbs: ["*"] +--- +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 metadata: name: knative-eventing-namespaced-edit labels: @@ -86,7 +99,7 @@ metadata: app.kubernetes.io/version: devel app.kubernetes.io/name: knative-eventing rules: - - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev"] + - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev"] resources: ["*"] verbs: ["create", "update", "patch", "delete"] --- @@ -99,6 +112,6 @@ metadata: app.kubernetes.io/version: devel app.kubernetes.io/name: knative-eventing rules: - - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev"] + - apiGroups: ["eventing.knative.dev", "messaging.knative.dev", "sources.knative.dev", "flows.knative.dev", "bindings.knative.dev", "sinks.knative.dev"] resources: ["*"] verbs: ["get", "list", "watch"]