From a5c8c9c279ae3604d4998837cf1949c3bd2d00b8 Mon Sep 17 00:00:00 2001 From: Maidul Islam Date: Wed, 8 Mar 2023 21:33:18 -0800 Subject: [PATCH] add rbac for config --- k8-operator/config/rbac/role.yaml | 11 +++++++++++ k8-operator/controllers/infisicalsecret_controller.go | 1 + 2 files changed, 12 insertions(+) diff --git a/k8-operator/config/rbac/role.yaml b/k8-operator/config/rbac/role.yaml index 0aa618262..68ea375b7 100644 --- a/k8-operator/config/rbac/role.yaml +++ b/k8-operator/config/rbac/role.yaml @@ -5,6 +5,17 @@ metadata: creationTimestamp: null name: manager-role rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - delete + - get + - list + - update + - watch - apiGroups: - "" resources: diff --git a/k8-operator/controllers/infisicalsecret_controller.go b/k8-operator/controllers/infisicalsecret_controller.go index bed609b33..ddfc39e02 100644 --- a/k8-operator/controllers/infisicalsecret_controller.go +++ b/k8-operator/controllers/infisicalsecret_controller.go @@ -25,6 +25,7 @@ type InfisicalSecretReconciler struct { //+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets/status,verbs=get;update;patch //+kubebuilder:rbac:groups=secrets.infisical.com,resources=infisicalsecrets/finalizers,verbs=update //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;delete +//+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update;delete //+kubebuilder:rbac:groups=apps,resources=deployments,verbs=list;watch;get;update // Reconcile is part of the main kubernetes reconciliation loop which aims to