add node watch back

Signed-off-by: ashnamehrotra <[email protected]>

config/rbac/role.yaml

@@ -23,6 +23,7 @@ rules:
   verbs:
   - get
   - list
+  - watch
 - apiGroups:
   - ""
   resources:

controllers/imagelist/imagelist_controller.go

@@ -124,7 +124,7 @@ type Reconciler struct {
 //+kubebuilder:rbac:groups=eraser.sh,resources=imagelists,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups="",resources=podtemplates,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=eraser.sh,resources=imagelists/status,verbs=get;update;patch
-//+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list
+//+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch
 //+kubebuilder:rbac:groups="",resources=pods,verbs=get;list;watch;update;create;delete
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to

main.go

@@ -153,6 +153,7 @@ func main() {
 						},
 					),
 				},
+				// to watch ImageLists
 				&eraserv1.ImageList{}: {
 					Field: fields.OneTermEqualSelector("metadata.name", "imagelist"),
 				},

manifest_staging/charts/eraser/templates/eraser-manager-role-clusterrole.yaml

@@ -27,6 +27,7 @@ rules:
   verbs:
   - get
   - list
+  - watch
 - apiGroups:
   - ""
   resources:

manifest_staging/deploy/eraser.yaml

@@ -321,6 +321,7 @@ rules:
   verbs:
   - get
   - list
+  - watch
 - apiGroups:
   - ""
   resources:
@@ -431,7 +432,7 @@ data:
       imageJob:
         successRatio: 1.0
         cleanup:
-          delayOnSuccess: 0s
+          delayOnSuccess: 24h
           delayOnFailure: 24h
       pullSecrets: [] # image pull secrets for collector/scanner/eraser
       priorityClassName: "" # priority class name for collector/scanner/eraser