diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index bbc799bbc..ec044677c 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -895,6 +895,7 @@ rules: - channels - gitopsclusters - helmreleases + - multiclusterapplicationsetreports - placementbindings - placementrules - policies diff --git a/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml b/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml index ab191f6ec..8a67b7ba5 100644 --- a/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml +++ b/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml @@ -199,6 +199,7 @@ rules: - policysets - subscriptions - subscriptionreports + - multiclusterapplicationsetreports verbs: - list - watch diff --git a/pkg/templates/rbac_gen.go b/pkg/templates/rbac_gen.go index bf01e7c3c..5d05f076d 100644 --- a/pkg/templates/rbac_gen.go +++ b/pkg/templates/rbac_gen.go @@ -281,7 +281,7 @@ package main //+kubebuilder:rbac:groups=operator.open-cluster-management.io,resources=multiclusterhubs,verbs=get;list;watch //+kubebuilder:rbac:groups=operators.coreos.com,resources=clusterserviceversions,verbs=get;list //+kubebuilder:rbac:groups=operators.coreos.com,resources=subscriptions,verbs=get;list;watch -//+kubebuilder:rbac:groups=policy.open-cluster-management.io;app.k8s.io;apps.open-cluster-management.io;argoproj.io,resources=applications;applicationsets;appprojects;argocds;channels;gitopsclusters;helmreleases;placementrules;placementbindings;policies;policyautomations;policysets;subscriptions;subscriptionreports,verbs=list;watch +//+kubebuilder:rbac:groups=policy.open-cluster-management.io;app.k8s.io;apps.open-cluster-management.io;argoproj.io,resources=applications;applicationsets;appprojects;argocds;channels;gitopsclusters;helmreleases;placementrules;placementbindings;policies;policyautomations;policysets;subscriptions;subscriptionreports;multiclusterapplicationsetreports,verbs=list;watch //+kubebuilder:rbac:groups=proxy.open-cluster-management.io,resources=clusterstatuses/aggregator,verbs=get;create //+kubebuilder:rbac:groups=proxy.open-cluster-management.io,resources=clusterstatuses/aggregator,verbs=get;create //+kubebuilder:rbac:groups=proxy.open-cluster-management.io,resources=managedproxyconfigurations;managedproxyconfigurations/status;managedproxyconfigurations/finalizers;managedproxyserviceresolvers;managedproxyserviceresolvers/status;managedproxyserviceresolvers/finalizers,verbs=*