Fix: add missing rbac roles

nokia · Aug 5, 2024 · 860afed · 860afed
1 parent ab280ee
commit 860afed
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 2 deletions.
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
@@ -5,6 +5,12 @@ generatorOptions:
   disableNameSuffixHash: true
 
 configMapGenerator:
-- name: manager-config
-  files:
+- files:
   - controller_manager_config.yaml
+  name: manager-config
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+images:
+- name: controller
+  newName: ncm-issuer
+  newTag: 1.1.1
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -5,6 +5,14 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - list
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/pkg/controllers/issuer_controller.go b/pkg/controllers/issuer_controller.go
@@ -62,6 +62,7 @@ func (r *IssuerReconciler) newIssuer() (client.Object, error) {
 //+kubebuilder:rbac:groups=certmanager.ncm.nokia.com,resources=issuers;clusterissuers,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=certmanager.ncm.nokia.com,resources=issuers/status;clusterissuers/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
+//+kubebuilder:rbac:groups="",resources=events,verbs=create;list;patch
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.