fix(rbac): add missing eventing.keda.sh permissions (#714)

Add r/w permissions for cloudeventsources and clustercloudeventsources in the minimal-rbac ClusterRole template. These are required to prevent a crashloop when shipping the operator with the `watchNamespace` property. Fixes #6084 Signed-off-by: Gaston Festari <[email protected]>
kedacore · Jan 22, 2025 · 33070ca · 33070ca
1 parent 3e58b2a
commit 33070ca
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/keda/templates/manager/minimal-rbac.yaml b/keda/templates/manager/minimal-rbac.yaml
@@ -113,6 +113,19 @@ rules:
   - update
   - watch
 {{- end }}
+- apiGroups:
+  - eventing.keda.sh
+  resources:
+  - cloudeventsources
+  - cloudeventsources/status
+  - clustercloudeventsources
+  - clustercloudeventsources/status
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding