Merge pull request #41 from IBM/fix-roles

add required roles

Author: ashimagarg27

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "go.sum|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2024-06-27T06:33:16Z",
+  "generated_at": "2024-07-04T13:24:14Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"

controllers/constants/constants.go

@@ -27,6 +27,7 @@ const (
 	NodesResource                      = "nodes"
 	PersistentVolumesResource          = "persistentvolumes"
 	PersistentVolumeClaimsResource     = "persistentvolumeclaims"
+	ConfigMapResource                  = "configmaps"
 
 	VerbGet    = "get"
 	VerbList   = "list"

controllers/internal/crutils/static_resource_generator.go

@@ -185,10 +185,13 @@ func (c *IBMObjectCSI) GenerateSCCForNodeClusterRole() *rbacv1.ClusterRole {
 			},
 			{
 				APIGroups: []string{""},
-				Resources: []string{
-					constants.PersistentVolumesResource,
-					constants.SecretsResource},
-				Verbs: []string{constants.VerbGet},
+				Resources: []string{constants.PersistentVolumesResource, constants.SecretsResource},
+				Verbs:     []string{constants.VerbGet},
+			},
+			{
+				APIGroups: []string{""},
+				Resources: []string{constants.ConfigMapResource},
+				Verbs:     []string{constants.VerbGet, constants.VerbList},
 			},
 		},
 	}