Skip to content

Commit b38c391

Browse files
(fix) Add ClusterExtensionRevision permissions to upgrade test RBAC
The upgrade test ServiceAccount needs permissions to manage ClusterExtensionRevisions when BoxcutterRuntime is enabled. Without these permissions, the upgraded controller cannot create or update ClusterExtensionRevision resources, causing the ClusterExtension to fail reconciliation after upgrade.
1 parent e5d8e94 commit b38c391

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

hack/test/pre-upgrade-setup.sh

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,19 @@ rules:
122122
- "update"
123123
resourceNames:
124124
- "${TEST_CLUSTER_EXTENSION_NAME}"
125+
- apiGroups:
126+
- "olm.operatorframework.io"
127+
resources:
128+
- "clusterextensionrevisions"
129+
- "clusterextensionrevisions/finalizers"
130+
verbs:
131+
- "create"
132+
- "update"
133+
- "patch"
134+
- "delete"
135+
- "get"
136+
- "list"
137+
- "watch"
125138
EOF
126139

127140
kubectl apply -f - <<EOF

0 commit comments

Comments
 (0)