Skip to content

Commit 6b0a04a

Browse files
authored
fix(vllm-operator): add missing RBAC permissions for PVCs and Ingresses (#647)
Signed-off-by: Mahmoud Frouk <[email protected]>
1 parent 8367d43 commit 6b0a04a

File tree

3 files changed

+26
-0
lines changed

3 files changed

+26
-0
lines changed

operator/config/default.yaml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1086,6 +1086,7 @@ rules:
10861086
- secrets
10871087
- serviceaccounts
10881088
- services
1089+
- persistentvolumeclaims
10891090
verbs:
10901091
- create
10911092
- delete
@@ -1114,6 +1115,18 @@ rules:
11141115
- patch
11151116
- update
11161117
- watch
1118+
- apiGroups:
1119+
- networking.k8s.io
1120+
resources:
1121+
- ingresses
1122+
verbs:
1123+
- create
1124+
- delete
1125+
- get
1126+
- list
1127+
- patch
1128+
- update
1129+
- watch
11171130
- apiGroups:
11181131
- production-stack.vllm.ai
11191132
resources:

operator/config/rbac/role.yaml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,18 @@ rules:
4040
- patch
4141
- update
4242
- watch
43+
- apiGroups:
44+
- networking.k8s.io
45+
resources:
46+
- ingresses
47+
verbs:
48+
- create
49+
- delete
50+
- get
51+
- list
52+
- patch
53+
- update
54+
- watch
4355
- apiGroups:
4456
- production-stack.vllm.ai
4557
resources:

operator/internal/controller/vllmrouter_controller.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,7 @@ type VLLMRouterReconciler struct {
5555
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles,verbs=get;list;watch;create;update;patch;delete
5656
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;create;update;patch;delete
5757
// +kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;list;watch;create;update;patch;delete
58+
// +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=create;delete;get;list;patch;update;watch
5859

5960
// Reconcile is part of the main kubernetes reconciliation loop which aims to
6061
// move the current state of the cluster closer to the desired state.

0 commit comments

Comments
 (0)