From 6c9fb0dc4b8a452e59c45438a4497e25dddecc13 Mon Sep 17 00:00:00 2001
From: Anatolii Bazko <abazko@redhat.com>
Date: Thu, 12 Aug 2021 16:03:37 +0300
Subject: [PATCH] chore: update permissions (#1007)

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
---
 .../che-operator.clusterserviceversion.yaml       | 15 +++++++++++++--
 .../che-operator.clusterserviceversion.yaml       | 15 +++++++++++++--
 config/rbac/cluster_role.yaml                     | 11 +++++++++++
 3 files changed, 37 insertions(+), 4 deletions(-)

diff --git a/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml b/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml
index 856ab7d5c..6f5d7570a 100644
--- a/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml
+++ b/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml
@@ -83,7 +83,7 @@ metadata:
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: https://github.com/eclipse-che/che-operator
     support: Eclipse Foundation
-  name: eclipse-che-preview-kubernetes.v7.35.0-279.next
+  name: eclipse-che-preview-kubernetes.v7.35.0-280.next
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -642,6 +642,7 @@ spec:
             - apiGroups:
                 - ""
               resources:
+                - events
                 - namespaces
               verbs:
                 - get
@@ -653,6 +654,16 @@ spec:
                 - pods/exec
               verbs:
                 - create
+            - apiGroups:
+                - ""
+              resourceNames:
+                - workspace-credentials-secret
+              resources:
+                - secrets
+              verbs:
+                - create
+                - delete
+                - get
             - apiGroups:
                 - ""
               resources:
@@ -1167,4 +1178,4 @@ spec:
   maturity: stable
   provider:
     name: Eclipse Foundation
-  version: 7.35.0-279.next
+  version: 7.35.0-280.next
diff --git a/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml b/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml
index be2edadf4..db3b4e632 100644
--- a/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml
+++ b/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml
@@ -76,7 +76,7 @@ metadata:
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
     repository: https://github.com/eclipse-che/che-operator
     support: Eclipse Foundation
-  name: eclipse-che-preview-openshift.v7.35.0-279.next
+  name: eclipse-che-preview-openshift.v7.35.0-280.next
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -691,6 +691,7 @@ spec:
             - apiGroups:
                 - ""
               resources:
+                - events
                 - namespaces
               verbs:
                 - get
@@ -702,6 +703,16 @@ spec:
                 - pods/exec
               verbs:
                 - create
+            - apiGroups:
+                - ""
+              resourceNames:
+                - workspace-credentials-secret
+              resources:
+                - secrets
+              verbs:
+                - create
+                - delete
+                - get
             - apiGroups:
                 - ""
               resources:
@@ -1236,4 +1247,4 @@ spec:
   maturity: stable
   provider:
     name: Eclipse Foundation
-  version: 7.35.0-279.next
+  version: 7.35.0-280.next
diff --git a/config/rbac/cluster_role.yaml b/config/rbac/cluster_role.yaml
index 1f77cbba4..6c721940a 100644
--- a/config/rbac/cluster_role.yaml
+++ b/config/rbac/cluster_role.yaml
@@ -451,6 +451,7 @@ rules:
   - apiGroups:
     - ""
     resources:
+    - events
     - namespaces
     verbs:
     - get
@@ -462,6 +463,16 @@ rules:
     - pods/exec
     verbs:
     - create
+  - apiGroups:
+    - ""
+    resourceNames:
+    - workspace-credentials-secret
+    resources:
+    - secrets
+    verbs:
+    - create
+    - delete
+    - get
   - apiGroups:
     - ""
     resources: