Skip to content

Commit d61ea70

Browse files
authored
fix: add RBAC permissions for ReferenceGrant resource (#182)
1 parent 4ee2596 commit d61ea70

File tree

2 files changed

+11
-0
lines changed

2 files changed

+11
-0
lines changed

config/rbac/role.yaml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -91,6 +91,7 @@ rules:
9191
- gatewayclasses/status
9292
- gateways/status
9393
- httproutes/status
94+
- referencegrants/status
9495
verbs:
9596
- get
9697
- update
@@ -102,6 +103,14 @@ rules:
102103
- get
103104
- list
104105
- watch
106+
- apiGroups:
107+
- gateway.networking.k8s.io
108+
resources:
109+
- referencegrants
110+
verbs:
111+
- list
112+
- update
113+
- watch
105114
- apiGroups:
106115
- networking.k8s.io
107116
resources:

internal/manager/controllers.go

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,8 @@ import (
6666
// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=gateways/status,verbs=get;update
6767
// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes,verbs=get;list;watch
6868
// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes/status,verbs=get;update
69+
// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants,verbs=list;watch;update
70+
// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants/status,verbs=get;update
6971

7072
// Networking
7173
// +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;update

0 commit comments

Comments
 (0)