From 81dc7a44c3d990d1b8bd4c8651104768d8d082f7 Mon Sep 17 00:00:00 2001 From: Tao Yi Date: Mon, 14 Oct 2024 17:52:44 +0800 Subject: [PATCH] chore(rbac) add permission to update kongpluginbindings/status (#743) * add permission to update kongpluginbindings/status * remove get status permission --- config/rbac/role/role.yaml | 1 + controller/konnect/reconciler_kongplugin_rbac.go | 1 + 2 files changed, 2 insertions(+) diff --git a/config/rbac/role/role.yaml b/config/rbac/role/role.yaml index 971ecfcf..5c8aed31 100644 --- a/config/rbac/role/role.yaml +++ b/config/rbac/role/role.yaml @@ -179,6 +179,7 @@ rules: - kongdataplaneclientcertificates/finalizers - kongkeys/finalizers - kongkeysets/finalizers + - kongpluginbindings/status - kongroutes/finalizers - kongservices/finalizers - kongsnis/finalizers diff --git a/controller/konnect/reconciler_kongplugin_rbac.go b/controller/konnect/reconciler_kongplugin_rbac.go index 31632556..cd99b013 100644 --- a/controller/konnect/reconciler_kongplugin_rbac.go +++ b/controller/konnect/reconciler_kongplugin_rbac.go @@ -6,3 +6,4 @@ package konnect //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongservices,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongroutes,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongpluginbindings,verbs=get;list;create;watch;update;patch;delete +//+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongpluginbindings/status,verbs=update;patch