Add missing poddisruption budget permissions in manager cluster role

Background --- Open feature operator now attempts to list, create, and watch pod disruption budget resources for flagd proxy since it can now configure HA replica for flagd proxy Changes --- * update existing ClusterRole configuration to include poddisruptionbudget resource permissions for api group: policy Testing --- * manually apply changes to ClusterRole resource, change FlagSource and watch for permission errors. Retry with extra verbs until no reconcile errors were encountered. Signed-off-by: Woody Hill <[email protected]>
open-feature · Oct 30, 2024 · 2cd4cc3 · 2cd4cc3
1 parent bcdafd2
commit 2cd4cc3
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -147,3 +147,11 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+    - policy
+  resources:
+    - poddisruptionbudgets
+  verbs:
+    - list
+    - create
+    - watch