Skip to content

Commit bab6256

Browse files
(fix) Add ClusterExtensionRevision permissions to upgrade test RBAC
The upgrade test ServiceAccount needs permissions to manage ClusterExtensionRevisions when BoxcutterRuntime is enabled. Without these permissions, the upgraded controller cannot create or update ClusterExtensionRevision resources, causing the ClusterExtension to fail reconciliation after upgrade.
1 parent f975d20 commit bab6256

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

hack/test/pre-upgrade-setup.sh

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,19 @@ rules:
122122
- "update"
123123
resourceNames:
124124
- "${TEST_CLUSTER_EXTENSION_NAME}"
125+
- apiGroups:
126+
- "olm.operatorframework.io"
127+
resources:
128+
- "clusterextensionrevisions"
129+
- "clusterextensionrevisions/finalizers"
130+
verbs:
131+
- "create"
132+
- "update"
133+
- "patch"
134+
- "delete"
135+
- "get"
136+
- "list"
137+
- "watch"
125138
EOF
126139

127140
kubectl apply -f - <<EOF

0 commit comments

Comments
 (0)