Update RBAC, so the controller can create/patch events (#146)

* Update RBAC, so the controller can create/patch events * Regenerate manifests after RBAC and controller utils change
ironcore-dev · Feb 17, 2023 · 80be10f · 80be10f
1 parent b8eb9c5
commit 80be10f
Show file tree

Hide file tree

Showing 6 changed files with 12 additions and 4 deletions.
diff --git a/config/crd/bases/ipam.onmetal.de_ips.yaml b/config/crd/bases/ipam.onmetal.de_ips.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.10.0
+    controller-gen.kubebuilder.io/version: v0.11.1
   creationTimestamp: null
   name: ips.ipam.onmetal.de
 spec:

diff --git a/config/crd/bases/ipam.onmetal.de_networkcounters.yaml b/config/crd/bases/ipam.onmetal.de_networkcounters.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.10.0
+    controller-gen.kubebuilder.io/version: v0.11.1
   creationTimestamp: null
   name: networkcounters.ipam.onmetal.de
 spec:

diff --git a/config/crd/bases/ipam.onmetal.de_networks.yaml b/config/crd/bases/ipam.onmetal.de_networks.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.10.0
+    controller-gen.kubebuilder.io/version: v0.11.1
   creationTimestamp: null
   name: networks.ipam.onmetal.de
 spec:

diff --git a/config/crd/bases/ipam.onmetal.de_subnets.yaml b/config/crd/bases/ipam.onmetal.de_subnets.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.10.0
+    controller-gen.kubebuilder.io/version: v0.11.1
   creationTimestamp: null
   name: subnets.ipam.onmetal.de
 spec:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -13,6 +13,13 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - '*'
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ipam.onmetal.de
   resources:

diff --git a/controllers/ip_controller.go b/controllers/ip_controller.go
@@ -52,6 +52,7 @@ type IPReconciler struct {
 }
 
 // +kubebuilder:rbac:groups=*,resources=*,verbs=get;list;watch
+// +kubebuilder:rbac:groups=*,resources=events,verbs=create;patch
 // +kubebuilder:rbac:groups=ipam.onmetal.de,resources=ips,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=ipam.onmetal.de,resources=ips/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=ipam.onmetal.de,resources=ips/finalizers,verbs=update