Add events permission to machinepoollet

ironcore-dev · Mar 27, 2023 · 89907c7 · 89907c7
1 parent 4a28dda
commit 89907c7
Show file tree

Hide file tree

Showing 9 changed files with 45 additions and 0 deletions.
diff --git a/config/apiserver/rbac/bucketpool_role.yaml b/config/apiserver/rbac/bucketpool_role.yaml
@@ -5,6 +5,13 @@ metadata:
   creationTimestamp: null
   name: storage.api.onmetal.de:system:bucketpools
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/config/apiserver/rbac/machinepool_role.yaml b/config/apiserver/rbac/machinepool_role.yaml
@@ -5,6 +5,13 @@ metadata:
   creationTimestamp: null
   name: compute.api.onmetal.de:system:machinepools
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/config/apiserver/rbac/volumepool_role.yaml b/config/apiserver/rbac/volumepool_role.yaml
@@ -5,6 +5,13 @@ metadata:
   creationTimestamp: null
   name: storage.api.onmetal.de:system:volumepools
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/config/bucketpoollet-broker/poollet-rbac/role.yaml b/config/bucketpoollet-broker/poollet-rbac/role.yaml
@@ -5,6 +5,13 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/config/machinepoollet-broker/poollet-rbac/role.yaml b/config/machinepoollet-broker/poollet-rbac/role.yaml
@@ -5,6 +5,13 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/config/volumepoollet-broker/poollet-rbac/role.yaml b/config/volumepoollet-broker/poollet-rbac/role.yaml
@@ -5,6 +5,13 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/poollet/bucketpoollet/controllers/bucket_controller.go b/poollet/bucketpoollet/controllers/bucket_controller.go
@@ -100,6 +100,7 @@ func (r *BucketReconciler) listORIBucketsByUID(ctx context.Context, bucketUID ty
 	return res.Buckets, nil
 }
 
+//+kubebuilder:rbac:groups="",resources=events,verbs=create;patch
 //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
 //+kubebuilder:rbac:groups=storage.api.onmetal.de,resources=buckets,verbs=get;list;watch;update;patch
 //+kubebuilder:rbac:groups=storage.api.onmetal.de,resources=buckets/status,verbs=get;update;patch

diff --git a/poollet/machinepoollet/controllers/machine_controller.go b/poollet/machinepoollet/controllers/machine_controller.go
@@ -82,6 +82,7 @@ func (r *MachineReconciler) machineUIDLabelSelector(machineUID types.UID) map[st
 	}
 }
 
+//+kubebuilder:rbac:groups="",resources=events,verbs=create;patch
 //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
 //+kubebuilder:rbac:groups=compute.api.onmetal.de,resources=machines,verbs=get;list;watch;update;patch
 //+kubebuilder:rbac:groups=compute.api.onmetal.de,resources=machines/status,verbs=get;update;patch

diff --git a/poollet/volumepoollet/controllers/volume_controller.go b/poollet/volumepoollet/controllers/volume_controller.go
@@ -101,6 +101,7 @@ func (r *VolumeReconciler) listORIVolumesByUID(ctx context.Context, volumeUID ty
 	return res.Volumes, nil
 }
 
+//+kubebuilder:rbac:groups="",resources=events,verbs=create;patch
 //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
 //+kubebuilder:rbac:groups=storage.api.onmetal.de,resources=volumes,verbs=get;list;watch;update;patch
 //+kubebuilder:rbac:groups=storage.api.onmetal.de,resources=volumes/status,verbs=get;update;patch