feat: fix pdb permissions

Signed-off-by: Lukas Reining <[email protected]>

Author: lukas-reining

config/rbac/role.yaml

@@ -98,6 +98,18 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - policy
+  resources:
+  - PodDisruptionBudget
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - rbac.authorization.k8s.io
   resourceNames:

controllers/core/flagd/controller.go

@@ -59,6 +59,7 @@ type IFlagdResourceReconciler interface {
 //+kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=core,resources=services;services/finalizers,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=policy,resources=PodDisruptionBudget,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=apps,resources=deployments,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=core.openfeature.dev,resources=featureflagsources/finalizers,verbs=get
 

docs/permissions.md

@@ -31,7 +31,7 @@ The `ConfigMap` permissions are needed to allow the mounting of `FeatureFlag` re
 | -                           | `Pod`                          | create, delete, get, list, patch, update, watch |
 | -                           | `ServiceAccount`               | get, list, watch                                |
 | -                           | `Service` *(\*)*               | create, delete, get, list, patch, update, watch |
-| `policy`                    | `PodDisruptionBudget`          | create, list, update, watch                     |
+| `policy`                    | `PodDisruptionBudget`          | create, delete, get, list, patch, update, watch |
 | `networking.k8s.io`         | `Ingress` *(\*)*               | create, delete, get, list, patch, update, watch |
 | `gateway.networking.k8s.io` | `HttpRoute`                    | create, delete, get, list, patch, update, watch |
 | `core.openfeature.dev`      | `FeatureFlag`                  | create, delete, get, list, patch, update, watch |