Changes

Author: siddhibhor-56

bundle/manifests/external-secrets-operator.clusterserviceversion.yaml

@@ -348,6 +348,10 @@ spec:
           - ""
           resources:
           - configmaps
+          - events
+          - secrets
+          - serviceaccounts
+          - services
           verbs:
           - create
           - delete
@@ -366,19 +370,6 @@ spec:
           - get
           - list
           - watch
-        - apiGroups:
-          - ""
-          resources:
-          - events
-          - secrets
-          - serviceaccounts
-          - services
-          verbs:
-          - create
-          - get
-          - list
-          - update
-          - watch
         - apiGroups:
           - ""
           resources:
@@ -393,6 +384,7 @@ spec:
           - create
           - get
           - list
+          - patch
           - update
           - watch
         - apiGroups:
@@ -437,6 +429,7 @@ spec:
           - create
           - get
           - list
+          - patch
           - update
           - watch
         - apiGroups:

config/rbac/role.yaml

@@ -8,6 +8,10 @@ rules:
   - ""
   resources:
   - configmaps
+  - events
+  - secrets
+  - serviceaccounts
+  - services
   verbs:
   - create
   - delete
@@ -26,19 +30,6 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - ""
-  resources:
-  - events
-  - secrets
-  - serviceaccounts
-  - services
-  verbs:
-  - create
-  - get
-  - list
-  - update
-  - watch
 - apiGroups:
   - ""
   resources:
@@ -53,6 +44,7 @@ rules:
   - create
   - get
   - list
+  - patch
   - update
   - watch
 - apiGroups:
@@ -97,6 +89,7 @@ rules:
   - create
   - get
   - list
+  - patch
   - update
   - watch
 - apiGroups:

pkg/controller/external_secrets/controller.go

@@ -94,11 +94,11 @@ type Reconciler struct {
 // +kubebuilder:rbac:groups=operator.openshift.io,resources=externalsecretsmanagers,verbs=get;list;watch;create;update
 // +kubebuilder:rbac:groups=operator.openshift.io,resources=externalsecrets/status,verbs=get;update
 // +kubebuilder:rbac:groups=operator.openshift.io,resources=externalsecrets/finalizers,verbs=update
-// +kubebuilder:rbac:groups=coordination.k8s.io,resources=leases,verbs=get;list;watch;create;update
+// +kubebuilder:rbac:groups=coordination.k8s.io,resources=leases,verbs=get;list;watch;create;update;patch
 
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles;rolebindings;clusterroles;clusterrolebindings,verbs=get;list;watch;create;update;patch;delete
-// +kubebuilder:rbac:groups=admissionregistration.k8s.io,resources=validatingwebhookconfigurations,verbs=get;list;watch;create;update
-// +kubebuilder:rbac:groups="",resources=events;secrets;services;serviceaccounts,verbs=get;list;watch;create;update
+// +kubebuilder:rbac:groups=admissionregistration.k8s.io,resources=validatingwebhookconfigurations,verbs=get;list;watch;create;update;patch
+// +kubebuilder:rbac:groups="",resources=events;secrets;services;serviceaccounts,verbs=get;list;watch;create;update;delete;patch
 // +kubebuilder:rbac:groups=apps,resources=deployments,verbs=get;list;watch;create;update
 // +kubebuilder:rbac:groups=cert-manager.io,resources=certificates;clusterissuers;issuers,verbs=get;list;watch;create;update
 // +kubebuilder:rbac:groups="",resources=namespaces,verbs=get;list;watch;create