add permissions on priorityclass to import controller (#588)

Signed-off-by: Yang Le <[email protected]>
stolostron · Feb 6, 2024 · 5be6107 · 5be6107
1 parent f2cf9a2
commit 5be6107
Show file tree

Hide file tree

Showing 4 changed files with 38 additions and 1 deletion.
diff --git a/bundle/manifests/multicluster-engine.clusterserviceversion.yaml b/bundle/manifests/multicluster-engine.clusterserviceversion.yaml
@@ -14,7 +14,7 @@ metadata:
         }
       ]
     capabilities: Basic Install
-    createdAt: "2024-01-25T08:27:07Z"
+    createdAt: "2024-02-06T11:49:16Z"
     operators.operatorframework.io/builder: operator-sdk-v1.32.0
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
   name: multicluster-engine.v0.0.1
@@ -1437,6 +1437,15 @@ spec:
           - managedclustersets/join
           verbs:
           - create
+        - apiGroups:
+          - cluster.open-cluster-management.io
+          resources:
+          - placements
+          verbs:
+          - create
+          - get
+          - list
+          - watch
         - apiGroups:
           - cluster.open-cluster-management.io
           resources:
@@ -2301,6 +2310,15 @@ spec:
           - patch
           - update
           - watch
+        - apiGroups:
+          - scheduling.k8s.io
+          resources:
+          - priorityclasses
+          verbs:
+          - create
+          - get
+          - patch
+          - update
         - apiGroups:
           - storage.k8s.io
           resources:

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -2241,6 +2241,15 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - scheduling.k8s.io
+  resources:
+  - priorityclasses
+  verbs:
+  - create
+  - get
+  - patch
+  - update
 - apiGroups:
   - storage.k8s.io
   resources:

diff --git a/pkg/templates/charts/toggle/server-foundation/templates/managedcluster-import-role.yaml b/pkg/templates/charts/toggle/server-foundation/templates/managedcluster-import-role.yaml
@@ -247,3 +247,12 @@ rules:
     - subjectaccessreviews
   verbs:
     - create
+- apiGroups:
+    - scheduling.k8s.io
+  resources:
+    - priorityclasses
+  verbs:
+    - get
+    - create
+    - patch
+    - update
diff --git a/pkg/templates/rbac_gen.go b/pkg/templates/rbac_gen.go