[RayCluster] grant pods and pods/resize patch permissions for IPPR (#3960)

* [RayCluster] grant pods and pods/resize patch permissions for IPPR integration

Signed-off-by: Rueian <[email protected]>

* [RayCluster] grant pods and pods/resize patch permissions for IPPR integration

Signed-off-by: Rueian <[email protected]>

---------

Signed-off-by: Rueian <[email protected]>
Signed-off-by: Rueian <[email protected]>

Author: rueian

helm-chart/kuberay-operator/templates/_helpers.tpl

@@ -163,6 +163,12 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - ""
+  resources:
+  - pods/resize
+  verbs:
+  - patch
 - apiGroups:
   - ""
   resources:

ray-operator/config/rbac/role.yaml

@@ -48,6 +48,12 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - ""
+  resources:
+  - pods/resize
+  verbs:
+  - patch
 - apiGroups:
   - ""
   resources:

ray-operator/controllers/ray/common/rbac.go

@@ -42,7 +42,12 @@ func BuildRole(cluster *rayv1.RayCluster) (*rbacv1.Role, error) {
 			{
 				APIGroups: []string{""},
 				Resources: []string{"pods"},
-				Verbs:     []string{"get", "list", "watch"},
+				Verbs:     []string{"get", "list", "watch", "patch"},
+			},
+			{
+				APIGroups: []string{""},
+				Resources: []string{"pods/resize"},
+				Verbs:     []string{"patch"},
 			},
 			{
 				APIGroups: []string{"ray.io"},

ray-operator/controllers/ray/raycluster_controller.go

@@ -95,6 +95,7 @@ type RayClusterReconcilerOptions struct {
 // +kubebuilder:rbac:groups=core,resources=events,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch;create;update;patch;delete;deletecollection
 // +kubebuilder:rbac:groups=core,resources=pods/status,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=core,resources=pods/resize,verbs=patch
 // +kubebuilder:rbac:groups=core,resources=services,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=core,resources=services/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=coordination.k8s.io,resources=leases,verbs=get;list;create;update