Skip to content

Commit 2fee08f

Browse files
(fix) Add ClusterExtensionRevision permissions to upgrade test RBAC
The upgrade test ServiceAccount needs permissions to manage ClusterExtensionRevisions when BoxcutterRuntime is enabled. Without these permissions, the upgraded controller cannot create or update ClusterExtensionRevision resources, causing the ClusterExtension to fail reconciliation after upgrade.
1 parent 16c8c14 commit 2fee08f

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

hack/test/pre-upgrade-setup.sh

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,19 @@ rules:
122122
- "update"
123123
resourceNames:
124124
- "${TEST_CLUSTER_EXTENSION_NAME}"
125+
- apiGroups:
126+
- "olm.operatorframework.io"
127+
resources:
128+
- "clusterextensionrevisions"
129+
- "clusterextensionrevisions/finalizers"
130+
verbs:
131+
- "create"
132+
- "update"
133+
- "patch"
134+
- "delete"
135+
- "get"
136+
- "list"
137+
- "watch"
125138
EOF
126139

127140
kubectl apply -f - <<EOF

0 commit comments

Comments
 (0)