From aa3e444916dedb7500c1f201e5310bad59abbd00 Mon Sep 17 00:00:00 2001 From: woodyh Date: Wed, 30 Oct 2024 11:59:37 +1000 Subject: [PATCH] Add missing poddisruption budget permissions in manager cluster role Background --- Open feature operator now attempts to list, create, and watch pod disruption budget resources for flagd proxy since it can now configure HA replica for flagd proxy Changes --- * update existing ClusterRole configuration to include poddisruptionbudget resource permissions for api group: policy Testing --- * manually apply changes to ClusterRole resource, change FlagSource and watch for permission errors. Retry with extra verbs until no reconcile errors were encountered. Signed-off-by: woodyh --- config/rbac/role.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index ec7affce1..5fb6e3c25 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -147,3 +147,11 @@ rules: verbs: - get - update +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - list + - create + - watch