Add Rancher projects rule (#62)

suse-edge · Dec 13, 2023 · cd15973 · cd15973
1 parent b9b5e67
commit cd15973
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 12 deletions.
diff --git a/assets/kubevirt/kubevirt-0.2.0.tgz b/assets/kubevirt/kubevirt-0.2.0.tgz
diff --git a/charts/kubevirt/0.2.0/templates/namespace-hooks.yaml b/charts/kubevirt/0.2.0/templates/namespace-hooks.yaml
@@ -9,10 +9,9 @@ metadata:
     "helm.sh/hook-weight": "1"
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: kubevirt-namespace-modifier
-  namespace: {{ .Release.Namespace }}
   annotations:
     "helm.sh/hook": pre-install
     "helm.sh/hook-delete-policy": hook-succeeded
@@ -23,12 +22,14 @@ rules:
     resourceNames:
       - {{ .Release.Namespace | quote }}
     verbs: [ "get", "patch" ]
+  - apiGroups: [ "management.cattle.io" ] # Rancher
+    resources: [ "projects" ]
+    verbs: [ "updatepsa" ]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: kubevirt-namespace-modifier
-  namespace: {{ .Release.Namespace }}
   annotations:
     "helm.sh/hook": pre-install
     "helm.sh/hook-delete-policy": hook-succeeded
@@ -38,7 +39,7 @@ subjects:
     namespace: {{ .Release.Namespace }}
     name: kubevirt-namespace-modifier
 roleRef:
-  kind: Role
+  kind: ClusterRole
   name: kubevirt-namespace-modifier
   apiGroup: rbac.authorization.k8s.io
 ---

diff --git a/index.yaml b/index.yaml
@@ -61,9 +61,9 @@ entries:
   kubevirt:
   - apiVersion: v2
     appVersion: 1.1.0
-    created: "2023-12-11T19:30:04.351997+02:00"
+    created: "2023-12-13T13:58:22.119519+02:00"
     description: A Helm chart for KubeVirt
-    digest: 6f822c871c485be8e75897117d71ee38b5f58080fb1b909f3764d935d6d67213
+    digest: 167fc276eee1b5c16e18753b89c1aac8b65cbcae638e06d661e62d749f1fdd86
     icon: https://raw.githubusercontent.com/cncf/artwork/main/projects/kubevirt/icon/color/kubevirt-icon-color.svg
     name: kubevirt
     type: application

diff --git a/packages/kubevirt/charts/templates/namespace-hooks.yaml b/packages/kubevirt/charts/templates/namespace-hooks.yaml
@@ -9,10 +9,9 @@ metadata:
     "helm.sh/hook-weight": "1"
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: kubevirt-namespace-modifier
-  namespace: {{ .Release.Namespace }}
   annotations:
     "helm.sh/hook": pre-install
     "helm.sh/hook-delete-policy": hook-succeeded
@@ -23,12 +22,14 @@ rules:
     resourceNames:
       - {{ .Release.Namespace | quote }}
     verbs: [ "get", "patch" ]
+  - apiGroups: [ "management.cattle.io" ] # Rancher
+    resources: [ "projects" ]
+    verbs: [ "updatepsa" ]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: kubevirt-namespace-modifier
-  namespace: {{ .Release.Namespace }}
   annotations:
     "helm.sh/hook": pre-install
     "helm.sh/hook-delete-policy": hook-succeeded
@@ -38,7 +39,7 @@ subjects:
     namespace: {{ .Release.Namespace }}
     name: kubevirt-namespace-modifier
 roleRef:
-  kind: Role
+  kind: ClusterRole
   name: kubevirt-namespace-modifier
   apiGroup: rbac.authorization.k8s.io
 ---