feat: move dv cloning permissions to a cluster role (#120)

pelotech · Dec 2, 2024 · ff0c1de · ff0c1de
1 parent 214efc5
commit ff0c1de
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/gitops/components/kubevirt/kustomize/resources.yaml b/gitops/components/kubevirt/kustomize/resources.yaml
@@ -24,6 +24,15 @@ spec:
     nodeSelector:
       kubernetes.io/os: linux
 ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: "cdi:data-volumes:clone"
+rules:
+  - apiGroups: ["cdi.kubevirt.io"]
+    resources: ["datavolumes/source"]
+    verbs: ["create"]
+---
 apiVersion: kubevirt.io/v1
 kind: KubeVirt
 metadata: