seg_yinzy
/
che-operator
mirror of https://github.com/eclipse-che/che-operator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add 'use' permission for DWO SA when container build is enabled (#1558) 

Add 'use' permissions in addition to 'get' and 'update' to be added to
the DevWorkspace Operator ServiceAccount when container build
functionality is enabled. This is required due to changes in the
DevWorkspace Operator in https://github.com/devfile/devworkspace-operator/pull/954

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
pull/1560/head
Angel Misevski 2022-11-10 16:57:30 -05:00 committed by GitHub
parent 349cb782a9
commit 1865d4728c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/deploy/container-build/container_build.go
View File

@ -170,7 +170,7 @@ func (cb *ContainerBuildReconciler) getDevWorkspaceSccPolicyRules(ctx *chetypes.
{
APIGroups: []string{"security.openshift.io"},
Resources: []string{"securitycontextconstraints"},
Verbs: []string{"get", "update"},
Verbs: []string{"get", "update", "use"},
ResourceNames: []string{ctx.CheCluster.Spec.DevEnvironments.ContainerBuildConfiguration.OpenShiftSecurityContextConstraint},
},
}