fix: add ResourceNames to RBAC policy for customresourcedefinitions

n3rdc4ptn · n3rdc4ptn · commit eb26b4fa2198 · 2025-07-21T10:48:34.000+02:00
diff --git a/internal/helper/clusteraccess.go b/internal/helper/clusteraccess.go
@@ -53,9 +53,10 @@ func GetOnboardingCluster(ctx context.Context, log logging.Logger, client client
 						Verbs:     []string{"get", "list"},
 					},
 					{
-						APIGroups: []string{"apiextensions.k8s.io"},
-						Resources: []string{"customresourcedefinitions"},
-						Verbs:     []string{"create", "update", "delete"},
+						APIGroups:     []string{"apiextensions.k8s.io"},
+						Resources:     []string{"customresourcedefinitions"},
+						Verbs:         []string{"create", "update", "delete"},
+						ResourceNames: []string{"mcpusage"},
 					},
 					{
 						APIGroups: []string{"usage.openmcp.cloud"},

Original file line number	Diff line number	Diff line change
`@@ -53,9 +53,10 @@ func GetOnboardingCluster(ctx context.Context, log logging.Logger, client client`
`53`	`53`	`Verbs: []string{"get", "list"},`
`54`	`54`	`},`
`55`	`55`	`{`
`56`		`- APIGroups: []string{"apiextensions.k8s.io"},`
`57`		`- Resources: []string{"customresourcedefinitions"},`
`58`		`- Verbs: []string{"create", "update", "delete"},`
	`56`	`+ APIGroups: []string{"apiextensions.k8s.io"},`
	`57`	`+ Resources: []string{"customresourcedefinitions"},`
	`58`	`+ Verbs: []string{"create", "update", "delete"},`
	`59`	`+ ResourceNames: []string{"mcpusage"},`
`59`	`60`	`},`
`60`	`61`	`{`
`61`	`62`	`APIGroups: []string{"usage.openmcp.cloud"},`