Skip to content

Commit 1ccdb77

Browse files
committed
forklift: add missing rbac
Signed-off-by: Benny Zlotnik <[email protected]>
1 parent b6392df commit 1ccdb77

File tree

1 file changed

+40
-0
lines changed
  • pkg/operator/resources/cluster

1 file changed

+40
-0
lines changed

pkg/operator/resources/cluster/rbac.go

+40
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,18 @@ func getAdminPolicyRules() []rbacv1.PolicyRule {
7575
"*",
7676
},
7777
},
78+
{
79+
APIGroups: []string{
80+
"forklift.cdi.kubevirt.io",
81+
},
82+
Resources: []string{
83+
"ovirtvolumepopulators",
84+
"openstackvolumepopulators",
85+
},
86+
Verbs: []string{
87+
"*",
88+
},
89+
},
7890
}
7991
}
8092

@@ -107,6 +119,20 @@ func getViewPolicyRules() []rbacv1.PolicyRule {
107119
"watch",
108120
},
109121
},
122+
{
123+
APIGroups: []string{
124+
"forklift.cdi.kubevirt.io",
125+
},
126+
Resources: []string{
127+
"ovirtvolumepopulators",
128+
"openstackvolumepopulators",
129+
},
130+
Verbs: []string{
131+
"get",
132+
"list",
133+
"watch",
134+
},
135+
},
110136
{
111137
APIGroups: []string{
112138
"cdi.kubevirt.io",
@@ -137,6 +163,20 @@ func createConfigReaderClusterRole(name string) *rbacv1.ClusterRole {
137163
"watch",
138164
},
139165
},
166+
{
167+
APIGroups: []string{
168+
"forklift.cdi.kubevirt.io",
169+
},
170+
Resources: []string{
171+
"ovirtvolumepopulators",
172+
"openstackvolumepopulators",
173+
},
174+
Verbs: []string{
175+
"get",
176+
"list",
177+
"watch",
178+
},
179+
},
140180
}
141181

142182
return utils.ResourceBuilder.CreateClusterRole(name, rules)

0 commit comments

Comments
 (0)