Skip to content

Commit f969246

Browse files
committed
fix rbac permissions
1 parent c880c8d commit f969246

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

cmd/project-workspace-operator/app/run.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -236,7 +236,7 @@ func (o *RunOptions) Run(ctx context.Context) error {
236236
Rules: []rbacv1.PolicyRule{
237237
{
238238
APIGroups: []string{"core.openmcp.cloud"},
239-
Resources: []string{"projects", "workspaces", "memberoverrides"},
239+
Resources: []string{"projects", "projects/status", "workspaces", "workspaces/status", "memberoverrides"},
240240
Verbs: []string{"*"},
241241
},
242242
{
@@ -321,7 +321,7 @@ func (o *RunOptions) Run(ctx context.Context) error {
321321
return fmt.Errorf("failed to get own identity: %w", err)
322322
}
323323
identity := review.Status.UserInfo.Username
324-
setupLog.Info("determined own identity to exclude from webhook validation", "identity", identity)
324+
setupLog.Info("Determined own identity to exclude from webhook validation", "identity", identity)
325325

326326
webhookServer := webhook.NewServer(webhook.Options{
327327
TLSOpts: o.WebhookTLSOpts,

cmd/project-workspace-operator/main.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -140,7 +140,7 @@ func (o *Options) run() {
140140
setupLog.Error(err, "failed to get own identity")
141141
}
142142
identity := review.Status.UserInfo.Username
143-
setupLog.Info("determined own identity to exclude from webhook validation", "identity", identity)
143+
setupLog.Info("Determined own identity to exclude from webhook validation", "identity", identity)
144144

145145
if err = (&pwv1alpha1.Project{}).SetupWebhookWithManager(runContext, mgr, *o.MemberOverridesName, identity); err != nil {
146146
setupLog.Error(err, "unable to create webhook", "webhook", "Project")

0 commit comments

Comments
 (0)