From 07e4df12980f1b17f60fbb3c02c5e4c4e172fbc6 Mon Sep 17 00:00:00 2001 From: Martin Gencur Date: Fri, 1 Nov 2024 11:33:25 +0100 Subject: [PATCH] Allow imc-controller to list JobSinks This is required otherwise MTChannelBasedBroker backed by IMC channel can't forward events to JobSink. The error on ImMemoryChannel is following: ``` failed to get lister for sinks.knative.dev/v1alpha1, Resource=jobsinks: jobsinks.sinks.knative.dev is forbidden: User "system:serviceaccount:knative-eventing:imc-controller" cannot list resource "jobsinks" in API group "sinks.knative.dev" at the cluster scope ``` --- .../in-memory-channel/roles/controller-clusterrole.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/config/channels/in-memory-channel/roles/controller-clusterrole.yaml b/config/channels/in-memory-channel/roles/controller-clusterrole.yaml index 6164e834f41..58c58143968 100644 --- a/config/channels/in-memory-channel/roles/controller-clusterrole.yaml +++ b/config/channels/in-memory-channel/roles/controller-clusterrole.yaml @@ -53,6 +53,15 @@ rules: - get - list - watch + - apiGroups: + - sinks.knative.dev + resources: + - jobsinks + - jobsinks/status + verbs: + - get + - list + - watch - apiGroups: - "" resources: