fix: add config map watch permission to artifact operator

c2ndev · c2ndev · commit 1da9d5cf303f · 2026-01-30T12:34:12.000+01:00
Signed-off-by: cannarelladev &lt;cannarella.dev@gmail.com&gt;
diff --git a/controllers/falco/role.go b/controllers/falco/role.go
@@ -47,7 +47,7 @@ func generateRole(ctx context.Context, cl client.Client, falco *instancev1alpha1
 					{
 						APIGroups: []string{""},
 						Resources: []string{"configmaps"},
-						Verbs:     []string{"get", "list"},
+						Verbs:     []string{"get", "list", "watch"},
 					},
 					{
 						APIGroups: []string{artifactv1alpha1.GroupVersion.Group},
diff --git a/controllers/falco/role_test.go b/controllers/falco/role_test.go
@@ -91,7 +91,7 @@ func TestGenerateRole(t *testing.T) {
 			assert.Contains(t, role.Rules, rbacv1.PolicyRule{
 				APIGroups: []string{""},
 				Resources: []string{"configmaps"},
-				Verbs:     []string{"get", "list"},
+				Verbs:     []string{"get", "list", "watch"},
 			})
 
 			// Verify artifact rule

Original file line number	Diff line number	Diff line change
`@@ -47,7 +47,7 @@ func generateRole(ctx context.Context, cl client.Client, falco *instancev1alpha1`
`47`	`47`	`{`
`48`	`48`	`APIGroups: []string{""},`
`49`	`49`	`Resources: []string{"configmaps"},`
`50`		`- Verbs: []string{"get", "list"},`
	`50`	`+ Verbs: []string{"get", "list", "watch"},`
`51`	`51`	`},`
`52`	`52`	`{`
`53`	`53`	`APIGroups: []string{artifactv1alpha1.GroupVersion.Group},`