Restore CRUD Secret RBAC permissons for the operator Role

CRUD access to Secrets were removed but it turns out we need it in order to sync Secrets from the broker namespace to the submariner-operator namespace. Signed-off-by: Tom Pantelis <[email protected]>
skitt · May 7, 2024 · ff1fd3b · ff1fd3b
1 parent d191623
commit ff1fd3b
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/config/rbac/submariner-operator/role.yaml b/config/rbac/submariner-operator/role.yaml
@@ -14,6 +14,16 @@ rules:
       - get
       - create
       - update
+  - apiGroups:
+      - ""
+    resources:
+      # For syncing Secrets from the broker
+      - secrets
+    verbs:
+      - get
+      - create
+      - update
+      - delete
   - apiGroups:
       - ""
     resources:

diff --git a/pkg/embeddedyamls/yamls.go b/pkg/embeddedyamls/yamls.go
@@ -2617,6 +2617,16 @@ rules:
       - get
       - create
       - update
+  - apiGroups:
+      - ""
+    resources:
+      # For syncing Secrets from the broker
+      - secrets
+    verbs:
+      - get
+      - create
+      - update
+      - delete
   - apiGroups:
       - ""
     resources: