From ff0c1de9b05788ca65431ac865b1e7e2d07cd578 Mon Sep 17 00:00:00 2001
From: Damien Chomat <chomatdam@users.noreply.github.com>
Date: Mon, 2 Dec 2024 15:23:40 -0600
Subject: [PATCH] feat: move dv cloning permissions to a cluster role (#120)

---
 gitops/components/kubevirt/kustomize/resources.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/gitops/components/kubevirt/kustomize/resources.yaml b/gitops/components/kubevirt/kustomize/resources.yaml
index dc3005c..39a2cd8 100644
--- a/gitops/components/kubevirt/kustomize/resources.yaml
+++ b/gitops/components/kubevirt/kustomize/resources.yaml
@@ -24,6 +24,15 @@ spec:
     nodeSelector:
       kubernetes.io/os: linux
 ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: "cdi:data-volumes:clone"
+rules:
+  - apiGroups: ["cdi.kubevirt.io"]
+    resources: ["datavolumes/source"]
+    verbs: ["create"]
+---
 apiVersion: kubevirt.io/v1
 kind: KubeVirt
 metadata: