From 31bf5fd0f22c210837832e52073ca66706f98d39 Mon Sep 17 00:00:00 2001 From: Feng Xiang Date: Fri, 8 Sep 2023 11:27:58 -0400 Subject: [PATCH] ACM-7389 Add list permission for multiclusterapplicationsetreports (#511) * Add list permission for multiclusterapplicationsetreports Signed-off-by: fxiang1 * Run generate rbac Signed-off-by: fxiang1 --------- Signed-off-by: fxiang1 --- config/rbac/role.yaml | 1 + .../toggle/console-mce/templates/console-clusterrole.yaml | 1 + pkg/templates/rbac_gen.go | 2 +- 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index bbc799bbc..ec044677c 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -895,6 +895,7 @@ rules: - channels - gitopsclusters - helmreleases + - multiclusterapplicationsetreports - placementbindings - placementrules - policies diff --git a/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml b/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml index ab191f6ec..8a67b7ba5 100644 --- a/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml +++ b/pkg/templates/charts/toggle/console-mce/templates/console-clusterrole.yaml @@ -199,6 +199,7 @@ rules: - policysets - subscriptions - subscriptionreports + - multiclusterapplicationsetreports verbs: - list - watch diff --git a/pkg/templates/rbac_gen.go b/pkg/templates/rbac_gen.go index bf01e7c3c..5d05f076d 100644 --- a/pkg/templates/rbac_gen.go +++ b/pkg/templates/rbac_gen.go @@ -281,7 +281,7 @@ package main //+kubebuilder:rbac:groups=operator.open-cluster-management.io,resources=multiclusterhubs,verbs=get;list;watch //+kubebuilder:rbac:groups=operators.coreos.com,resources=clusterserviceversions,verbs=get;list //+kubebuilder:rbac:groups=operators.coreos.com,resources=subscriptions,verbs=get;list;watch -//+kubebuilder:rbac:groups=policy.open-cluster-management.io;app.k8s.io;apps.open-cluster-management.io;argoproj.io,resources=applications;applicationsets;appprojects;argocds;channels;gitopsclusters;helmreleases;placementrules;placementbindings;policies;policyautomations;policysets;subscriptions;subscriptionreports,verbs=list;watch +//+kubebuilder:rbac:groups=policy.open-cluster-management.io;app.k8s.io;apps.open-cluster-management.io;argoproj.io,resources=applications;applicationsets;appprojects;argocds;channels;gitopsclusters;helmreleases;placementrules;placementbindings;policies;policyautomations;policysets;subscriptions;subscriptionreports;multiclusterapplicationsetreports,verbs=list;watch //+kubebuilder:rbac:groups=proxy.open-cluster-management.io,resources=clusterstatuses/aggregator,verbs=get;create //+kubebuilder:rbac:groups=proxy.open-cluster-management.io,resources=clusterstatuses/aggregator,verbs=get;create //+kubebuilder:rbac:groups=proxy.open-cluster-management.io,resources=managedproxyconfigurations;managedproxyconfigurations/status;managedproxyconfigurations/finalizers;managedproxyserviceresolvers;managedproxyserviceresolvers/status;managedproxyserviceresolvers/finalizers,verbs=*