Add required RBAC to list and watch CRDs

astefanutti · openshift-merge-bot[bot] · commit 14a55860dcc8 · 2024-04-26T18:05:18.000Z
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -32,6 +32,14 @@ rules:
   - list
   - update
   - watch
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - authentication.k8s.io
   resources:
diff --git a/main.go b/main.go
@@ -203,6 +203,8 @@ func setupRayClusterController(mgr ctrl.Manager, cfg *config.CodeFlareOperatorCo
 	return rayClusterController.SetupWithManager(mgr)
 }
 
+// +kubebuilder:rbac:groups="apiextensions.k8s.io",resources=customresourcedefinitions,verbs=get;list;watch
+
 func waitForRayClusterAPIandSetupController(ctx context.Context, mgr ctrl.Manager, cfg *config.CodeFlareOperatorConfiguration, isOpenShift bool, certsReady chan struct{}) error {
 	crdClient, err := apiextensionsclientset.NewForConfig(mgr.GetConfig())
 	if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -203,6 +203,8 @@ func setupRayClusterController(mgr ctrl.Manager, cfg *config.CodeFlareOperatorCo`
`203`	`203`	`return rayClusterController.SetupWithManager(mgr)`
`204`	`204`	`}`
`205`	`205`
	`206`	`+// +kubebuilder:rbac:groups="apiextensions.k8s.io",resources=customresourcedefinitions,verbs=get;list;watch`
	`207`	`+`
`206`	`208`	`func waitForRayClusterAPIandSetupController(ctx context.Context, mgr ctrl.Manager, cfg *config.CodeFlareOperatorConfiguration, isOpenShift bool, certsReady chan struct{}) error {`
`207`	`209`	`crdClient, err := apiextensionsclientset.NewForConfig(mgr.GetConfig())`
`208`	`210`	`if err != nil {`