fix: update permission in helm chart (#46)

kyverno · Feb 1, 2024 · fad0d1e · fad0d1e
1 parent 6675063
commit fad0d1e
Show file tree

Hide file tree

Showing 5 changed files with 45 additions and 12 deletions.
diff --git a/charts/reports-server/templates/cluster-roles.yaml b/charts/reports-server/templates/cluster-roles.yaml
@@ -10,14 +10,49 @@ metadata:
     {{- include "reports-server.labels" . | nindent 4 }}
 rules:
 - apiGroups:
-  - wgpolicyk8s.io
+    - reports.kyverno.io
   resources:
-  - policyreports
-  - clusterpolicyreports
+    - ephemeralreports
+    - clusterephemeralreports
   verbs:
-  - get
-  - list
-  - watch
+    - create
+    - delete
+    - get
+    - list
+    - patch
+    - update
+    - watch
+    - deletecollection
+- apiGroups:
+    - wgpolicyk8s.io
+  resources:
+    - policyreports
+    - policyreports/status
+    - clusterpolicyreports
+    - clusterpolicyreports/status
+  verbs:
+    - create
+    - delete
+    - get
+    - list
+    - patch
+    - update
+    - watch
+    - deletecollection
+- apiGroups:
+    - ''
+    - events.k8s.io
+  resources:
+    - events
+  verbs:
+    - create
+    - patch
+- apiGroups:
+    - authorization.k8s.io
+  resources:
+    - subjectaccessreviews
+  verbs:
+    - create
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1

diff --git a/pkg/storage/db/cephr.go b/pkg/storage/db/cephr.go
@@ -67,8 +67,8 @@ func (c *cephr) Get(ctx context.Context, name string) (reportsv1.ClusterEphemera
 
 	row := c.db.QueryRow("SELECT report FROM clusterephemeralreports WHERE (name = $1)", name)
 	if err := row.Scan(&jsonb); err != nil {
+		klog.ErrorS(err, fmt.Sprintf("clusterephemeralreport not found name=%s", name))
 		if err == sql.ErrNoRows {
-			klog.ErrorS(err, "cluster ephemeral ephemeral report not found")
 			return reportsv1.ClusterEphemeralReport{}, fmt.Errorf("clusterephemeralreport get %s: no such ephemeral report", name)
 		}
 		return reportsv1.ClusterEphemeralReport{}, fmt.Errorf("clusterephemeralreport get %s: %v", name, err)

diff --git a/pkg/storage/db/cpolr.go b/pkg/storage/db/cpolr.go
@@ -67,8 +67,8 @@ func (c *cpolrdb) Get(ctx context.Context, name string) (v1alpha2.ClusterPolicyR
 
 	row := c.db.QueryRow("SELECT report FROM clusterpolicyreports WHERE (name = $1)", name)
 	if err := row.Scan(&jsonb); err != nil {
+		klog.ErrorS(err, fmt.Sprintf("clusterpolicyreport not found name=%s", name))
 		if err == sql.ErrNoRows {
-			klog.ErrorS(err, "cluster policy report not found")
 			return v1alpha2.ClusterPolicyReport{}, fmt.Errorf("clusterpolicyreport get %s: no such policy report", name)
 		}
 		return v1alpha2.ClusterPolicyReport{}, fmt.Errorf("clusterpolicyreport get %s: %v", name, err)

diff --git a/pkg/storage/db/ephr.go b/pkg/storage/db/ephr.go
@@ -72,11 +72,10 @@ func (p *ephrdb) Get(ctx context.Context, name, namespace string) (reportsv1.Eph
 
 	row := p.db.QueryRow("SELECT report FROM ephemeralreports WHERE (namespace = $1) AND (name = $2)", namespace, name)
 	if err := row.Scan(&jsonb); err != nil {
+		klog.ErrorS(err, fmt.Sprintf("ephemeralreport not found name=%s namespace=%s", name, namespace))
 		if err == sql.ErrNoRows {
-			klog.ErrorS(err, "ephemeralreport not found")
 			return reportsv1.EphemeralReport{}, fmt.Errorf("ephemeralreport get %s/%s: no such ephemeral report: %v", namespace, name, err)
 		}
-		klog.ErrorS(err, "ephemeralreport not found")
 		return reportsv1.EphemeralReport{}, fmt.Errorf("ephemeralreport get %s/%s: %v", namespace, name, err)
 	}
 	var report reportsv1.EphemeralReport

diff --git a/pkg/storage/db/polr.go b/pkg/storage/db/polr.go
@@ -72,11 +72,10 @@ func (p *polrdb) Get(ctx context.Context, name, namespace string) (v1alpha2.Poli
 
 	row := p.db.QueryRow("SELECT report FROM policyreports WHERE (namespace = $1) AND (name = $2)", namespace, name)
 	if err := row.Scan(&jsonb); err != nil {
+		klog.ErrorS(err, fmt.Sprintf("policyreport not found name=%s namespace=%s", name, namespace))
 		if err == sql.ErrNoRows {
-			klog.ErrorS(err, "policyreport not found")
 			return v1alpha2.PolicyReport{}, fmt.Errorf("policyreport get %s/%s: no such policy report: %v", namespace, name, err)
 		}
-		klog.ErrorS(err, "policyreport not found")
 		return v1alpha2.PolicyReport{}, fmt.Errorf("policyreport get %s/%s: %v", namespace, name, err)
 	}
 	var report v1alpha2.PolicyReport