add permission to zora operator delete service accounts (#249)

undistro · Feb 29, 2024 · f724f8e · f724f8e
1 parent 863d6e3
commit f724f8e
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/charts/zora/templates/operator/rbac.yaml b/charts/zora/templates/operator/rbac.yaml
@@ -102,6 +102,7 @@ rules:
   - serviceaccounts
   verbs:
   - create
+  - delete
   - get
   - list
   - patch

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -38,6 +38,7 @@ rules:
   - serviceaccounts
   verbs:
   - create
+  - delete
   - get
   - list
   - patch

diff --git a/internal/controller/zora/clusterscan_controller.go b/internal/controller/zora/clusterscan_controller.go
@@ -80,7 +80,7 @@ type ClusterScanReconciler struct {
 //+kubebuilder:rbac:groups=batch,resources=cronjobs/status,verbs=get
 //+kubebuilder:rbac:groups=batch,resources=jobs,verbs=get;list;watch
 //+kubebuilder:rbac:groups=batch,resources=jobs/status,verbs=get
-//+kubebuilder:rbac:groups="",resources=serviceaccounts,verbs=get;list;watch;create;update;patch
+//+kubebuilder:rbac:groups="",resources=serviceaccounts,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups="",resources=serviceaccounts/status,verbs=get
 //+kubebuilder:rbac:groups="",resources=pods;pods/log,verbs=get;list
 //+kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=clusterrolebindings,verbs=get;list;watch;update;patch
-Original file line number
+Diff line change
@@ Expand Up / @@ -102,6 +102,7 @@ rules: @@
       - serviceaccounts
       verbs:
       - create
+      - delete
       - get
       - list
       - patch
@@ Expand Down @@