Skip to content

Commit a6eb04b

Browse files
committed
fix(permissions): the aggregated edit role should grant view access
to operatorgroups
1 parent c334aaa commit a6eb04b

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

deploy/chart/templates/0000_50_olm_09-aggregated.clusterrole.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,5 +25,8 @@ metadata:
2525
rbac.authorization.k8s.io/aggregate-to-view: "true"
2626
rules:
2727
- apiGroups: ["operators.coreos.com"]
28-
resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions", "packagemanifests"]
28+
resources: ["clusterserviceversions", "catalogsources", "installplans", "subscriptions", "operatorgroups"]
29+
verbs: ["get", "list", "watch"]
30+
- apiGroups: ["packages.operators.coreos.com"]
31+
resources: ["packagemanifests"]
2932
verbs: ["get", "list", "watch"]

0 commit comments

Comments
 (0)