Merge pull request vmware-tanzu#1405 from bryanv/bryanv/fix-wrong-storagepolices-group-rbac

bryanv · web-flow · commit a1cc17d463e8 · 2026-01-05T11:39:23.000-06:00
🌱 Fix RBAC group for StoragePolicies in StorageClass controller
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -375,15 +375,3 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - vsphere.policy.vmware.com
-  resources:
-  - storagepolicies
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
diff --git a/controllers/storage/storageclass/storageclass_controller.go b/controllers/storage/storageclass/storageclass_controller.go
@@ -71,7 +71,7 @@ type Reconciler struct {
 }
 
 // +kubebuilder:rbac:groups=storage.k8s.io,resources=storageclasses,verbs=get;list;watch
-// +kubebuilder:rbac:groups=vsphere.policy.vmware.com,resources=storagepolicies,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=infra.vmware.com,resources=storagepolicies,verbs=get;list;watch;create;update;patch;delete
 
 func (r *Reconciler) Reconcile(
 	ctx context.Context,

Original file line number	Diff line number	Diff line change
`@@ -71,7 +71,7 @@ type Reconciler struct {`
`71`	`71`	`}`
`72`	`72`
`73`	`73`	`// +kubebuilder:rbac:groups=storage.k8s.io,resources=storageclasses,verbs=get;list;watch`
`74`		`-// +kubebuilder:rbac:groups=vsphere.policy.vmware.com,resources=storagepolicies,verbs=get;list;watch;create;update;patch;delete`
	`74`	`+// +kubebuilder:rbac:groups=infra.vmware.com,resources=storagepolicies,verbs=get;list;watch;create;update;patch;delete`
`75`	`75`
`76`	`76`	`func (r *Reconciler) Reconcile(`
`77`	`77`	`ctx context.Context,`