seg_yinzy
/
che-operator
mirror of https://github.com/eclipse-che/che-operator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: Allow roles update for che workspace cluster role

pull/959/head
Max Shaposhnik 2021-07-21 22:03:04 +03:00 committed by GitHub
parent 727141e3d4
commit 9195560156
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
bundle/nightly/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml
View File

@ -83,7 +83,7 @@ metadata:
operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
repository: https://github.com/eclipse-che/che-operator
support: Eclipse Foundation
name: eclipse-che-preview-kubernetes.v7.34.0-267.nightly
name: eclipse-che-preview-kubernetes.v7.34.0-268.nightly
namespace: placeholder
spec:
apiservicedefinitions: {}
@ -329,6 +329,7 @@ spec:
verbs:
- get
- create
- update
- delete
- apiGroups:
- rbac.authorization.k8s.io
@ -1299,4 +1300,4 @@ spec:
maturity: stable
provider:
name: Eclipse Foundation
version: 7.34.0-267.nightly
version: 7.34.0-268.nightly

6
bundle/nightly/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml
View File

@ -74,7 +74,7 @@ metadata:
operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
repository: https://github.com/eclipse-che/che-operator
support: Eclipse Foundation
name: eclipse-che-preview-openshift.v7.34.0-267.nightly
name: eclipse-che-preview-openshift.v7.34.0-268.nightly
namespace: placeholder
spec:
apiservicedefinitions: {}
@ -362,6 +362,7 @@ spec:
verbs:
- get
- create
- update
- delete
- apiGroups:
- authorization.openshift.io
@ -379,6 +380,7 @@ spec:
verbs:
- get
- create
- update
- delete
- apiGroups:
- rbac.authorization.k8s.io
@ -1362,4 +1364,4 @@ spec:
maturity: stable
provider:
name: Eclipse Foundation
version: 7.34.0-267.nightly
version: 7.34.0-268.nightly

2
config/rbac/cluster_role.yaml
View File

@ -108,6 +108,7 @@ rules:
verbs:
- get
- create
- update
- delete
- apiGroups:
- authorization.openshift.io
@ -125,6 +126,7 @@ rules:
verbs:
- get
- create
- update
- delete
- apiGroups:
- rbac.authorization.k8s.io

4
controllers/che/workspace_namespace_permission.go
View File

@ -311,7 +311,7 @@ func getWorkspacesPolicies() []rbac.PolicyRule {
{
APIGroups: []string{"rbac.authorization.k8s.io"},
Resources: []string{"roles"},
Verbs: []string{"get", "create"},
Verbs: []string{"get", "update", "create"},
},
{
APIGroups: []string{"rbac.authorization.k8s.io"},
@ -333,7 +333,7 @@ func getWorkspacesPolicies() []rbac.PolicyRule {
{
APIGroups: []string{"authorization.openshift.io"},
Resources: []string{"roles"},
Verbs: []string{"get", "create"},
Verbs: []string{"get", "update", "create"},
},
{
APIGroups: []string{"authorization.openshift.io"},