seg_yinzy
/
che-operator
mirror of https://github.com/eclipse-che/che-operator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: Allow roles update for che workspace cluster role

pull/959/head
Max Shaposhnik 2021-07-21 22:03:04 +03:00 committed by GitHub
parent 727141e3d4
commit 9195560156
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
bundle/nightly/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml
View File

@ -83,7 +83,7 @@ metadata:
operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
repository: https://github.com/eclipse-che/che-operator repository: https://github.com/eclipse-che/che-operator
support: Eclipse Foundation support: Eclipse Foundation
name: eclipse-che-preview-kubernetes.v7.34.0-267.nightly name: eclipse-che-preview-kubernetes.v7.34.0-268.nightly
namespace: placeholder namespace: placeholder
spec: spec:
apiservicedefinitions: {} apiservicedefinitions: {}
@ -329,6 +329,7 @@ spec:
verbs: verbs:
- get - get
- create - create
- update
- delete - delete
- apiGroups: - apiGroups:
- rbac.authorization.k8s.io - rbac.authorization.k8s.io
@ -1299,4 +1300,4 @@ spec:
maturity: stable maturity: stable
provider: provider:
name: Eclipse Foundation name: Eclipse Foundation
version: 7.34.0-267.nightly version: 7.34.0-268.nightly

6
bundle/nightly/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml
View File

@ -74,7 +74,7 @@ metadata:
operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
repository: https://github.com/eclipse-che/che-operator repository: https://github.com/eclipse-che/che-operator
support: Eclipse Foundation support: Eclipse Foundation
name: eclipse-che-preview-openshift.v7.34.0-267.nightly name: eclipse-che-preview-openshift.v7.34.0-268.nightly
namespace: placeholder namespace: placeholder
spec: spec:
apiservicedefinitions: {} apiservicedefinitions: {}
@ -362,6 +362,7 @@ spec:
verbs: verbs:
- get - get
- create - create
- update
- delete - delete
- apiGroups: - apiGroups:
- authorization.openshift.io - authorization.openshift.io
@ -379,6 +380,7 @@ spec:
verbs: verbs:
- get - get
- create - create
- update
- delete - delete
- apiGroups: - apiGroups:
- rbac.authorization.k8s.io - rbac.authorization.k8s.io
@ -1362,4 +1364,4 @@ spec:
maturity: stable maturity: stable
provider: provider:
name: Eclipse Foundation name: Eclipse Foundation
version: 7.34.0-267.nightly version: 7.34.0-268.nightly

2
config/rbac/cluster_role.yaml
View File

@ -108,6 +108,7 @@ rules:
verbs: verbs:
- get - get
- create - create
- update
- delete - delete
- apiGroups: - apiGroups:
- authorization.openshift.io - authorization.openshift.io
@ -125,6 +126,7 @@ rules:
verbs: verbs:
- get - get
- create - create
- update
- delete - delete
- apiGroups: - apiGroups:
- rbac.authorization.k8s.io - rbac.authorization.k8s.io

4
controllers/che/workspace_namespace_permission.go
View File

@ -311,7 +311,7 @@ func getWorkspacesPolicies() []rbac.PolicyRule {
{ {
APIGroups: []string{"rbac.authorization.k8s.io"}, APIGroups: []string{"rbac.authorization.k8s.io"},
Resources: []string{"roles"}, Resources: []string{"roles"},
Verbs: []string{"get", "create"}, Verbs: []string{"get", "update", "create"},
}, },
{ {
APIGroups: []string{"rbac.authorization.k8s.io"}, APIGroups: []string{"rbac.authorization.k8s.io"},
@ -333,7 +333,7 @@ func getWorkspacesPolicies() []rbac.PolicyRule {
{ {
APIGroups: []string{"authorization.openshift.io"}, APIGroups: []string{"authorization.openshift.io"},
Resources: []string{"roles"}, Resources: []string{"roles"},
Verbs: []string{"get", "create"}, Verbs: []string{"get", "update", "create"},
}, },
{ {
APIGroups: []string{"authorization.openshift.io"}, APIGroups: []string{"authorization.openshift.io"},