Add rbac for deploying hostedclusters and nodepools

Signed-off-by: Sharat Akhoury <[email protected]>
stolostron · Jun 21, 2024 · af949f9 · af949f9
1 parent 469e2f0
commit af949f9
Show file tree

Hide file tree

Showing 3 changed files with 42 additions and 0 deletions.
diff --git a/bundle/manifests/siteconfig.clusterserviceversion.yaml b/bundle/manifests/siteconfig.clusterserviceversion.yaml
@@ -347,6 +347,26 @@ spec:
           - get
           - list
           - watch
+        - apiGroups:
+          - hypershift.openshift.io
+          resources:
+          - hostedclusters
+          verbs:
+          - create
+          - delete
+          - get
+          - patch
+          - update
+        - apiGroups:
+          - hypershift.openshift.io
+          resources:
+          - nodepools
+          verbs:
+          - create
+          - delete
+          - get
+          - patch
+          - update
         - apiGroups:
           - metaclusterinstall.openshift.io
           resources:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -127,6 +127,26 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - hypershift.openshift.io
+  resources:
+  - hostedclusters
+  verbs:
+  - create
+  - delete
+  - get
+  - patch
+  - update
+- apiGroups:
+  - hypershift.openshift.io
+  resources:
+  - nodepools
+  verbs:
+  - create
+  - delete
+  - get
+  - patch
+  - update
 - apiGroups:
   - metaclusterinstall.openshift.io
   resources:

diff --git a/internal/controller/siteconfig_controller.go b/internal/controller/siteconfig_controller.go
@@ -110,6 +110,8 @@ func requeueWithCustomInterval(interval time.Duration) ctrl.Result {
 //+kubebuilder:rbac:groups=metal3.io,resources=baremetalhosts,verbs=get;create;update;patch
 //+kubebuilder:rbac:groups=agent.open-cluster-management.io,resources=klusterletaddonconfigs,verbs=get;create;update;patch
 //+kubebuilder:rbac:groups=metal3.io,resources=hostfirmwaresettings,verbs=get;create;update;patch
+//+kubebuilder:rbac:groups=hypershift.openshift.io,resources=hostedclusters,verbs=get;create;update;patch;delete
+//+kubebuilder:rbac:groups=hypershift.openshift.io,resources=nodepools,verbs=get;create;update;patch;delete
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.