fix: added more permissions for operator role; now its fully functional

TU-Wien-dataLAB · Jul 16, 2024 · abc45b0 · abc45b0
1 parent c60f90c
commit abc45b0
Show file tree

Hide file tree

Showing 5 changed files with 19 additions and 70 deletions.
diff --git a/chart/config-server-operator/templates/crd.yaml b/chart/config-server-operator/templates/crd.yaml
diff --git a/chart/config-server-operator/templates/deployment.yaml b/chart/config-server-operator/templates/deployment.yaml
@@ -18,4 +18,4 @@ spec:
       serviceAccountName: config-server-service-account
       containers:
       - name: config-server-operator
-        image: registry.datalab.tuwien.ac.at/config_server/operator:latest
+        image: ghcr.io/tu-wien-datalab/config-server-operator:sha-ad9a4e7
diff --git a/chart/config-server-operator/templates/pre-delete-hook.yaml b/chart/config-server-operator/templates/pre-delete-hook.yaml
@@ -17,4 +17,5 @@ spec:
             - -c
             - |
               kubectl delete cfg-server --all -n {{ .Values.namespace }}
+              kubectl delete kvp --all -n {{ .Values.namespace }}
       restartPolicy: OnFailure
diff --git a/chart/config-server-operator/templates/server.yaml b/chart/config-server-operator/templates/server.yaml
@@ -0,0 +1,10 @@
+apiVersion: datalab.tuwien.ac.at/v1
+kind: ConfigServer
+metadata:
+  name: server-config
+  namespace: "{{ .Values.namespace }}"
+spec:
+  image: ghcr.io/tu-wien-datalab/config-server:main
+  imagePullPolicy: IfNotPresent
+  containerPort: 80
+  configMountPath: /var/lib/config-server
diff --git a/chart/config-server-operator/templates/service-account.yaml b/chart/config-server-operator/templates/service-account.yaml
@@ -15,17 +15,21 @@ rules:
     verbs: [list, watch]
 
   - apiGroups: [""]
-    resources: [namespaces]
-    verbs: [list, watch]
+    resources: [configmaps, services, namespaces, events]
+    verbs: [list, watch, create, patch, delete, get]
 
   - apiGroups: [admissionregistration.k8s.io/v1, admissionregistration.k8s.io/v1beta1]
     resources: [validatingwebhookconfigurations, mutatingwebhookconfigurations]
     verbs: [create, patch]
 
   - apiGroups: [datalab.tuwien.ac.at]
     resources: [configservers, keyvaluepairs]
-    verbs: [list, watch, create, patch, delete]
+    verbs: [list, watch, create, patch, delete, get]
 
+  - apiGroups: ["apps"]
+    resources: [deployments]
+    verbs: [list, watch, create, patch, delete]
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding