Merge pull request #190 from projectsyn/fix-rbac

Allow `controller-manager` to `list`, `get`, and `watch` TenantTemplates
projectsyn · Aug 9, 2021 · ab5af1a · ab5af1a
2 parents 8a264d7 + 13c87d4
commit ab5af1a
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -120,3 +120,11 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - syn.tools
+  resources:
+  - tenanttemplates
+  verbs:
+  - get
+  - list
+  - watch
diff --git a/controllers/tenant_controller.go b/controllers/tenant_controller.go
@@ -25,6 +25,7 @@ type TenantReconciler struct {
 //+kubebuilder:rbac:groups=syn.tools,resources=tenants,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=syn.tools,resources=tenants/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=syn.tools,resources=tenants/finalizers,verbs=update
+//+kubebuilder:rbac:groups=syn.tools,resources=tenanttemplates,verbs=get;list;watch
 
 // Reconcile The Controller will requeue the Request to be processed again if the returned error is non-nil or
 // Result.Requeue is true, otherwise upon completion it will remove the work from the queue.