Update CRD validation and RBAC

api/v1alpha1/runner_types.go

@@ -22,6 +22,8 @@ import (
 
 // RunnerSpec defines the desired state of Runner
 type RunnerSpec struct {
+	// +kubebuilder:validation:MinLength=3
+	// +kubebuilder:validation:Pattern=`^[^/]+/[^/]+$`
 	Repository string `json:"repository"`
 
 	// +optional

config/crd/bases/actions.summerwind.dev_runners.yaml

@@ -39,6 +39,8 @@ spec:
             image:
               type: string
             repository:
+              minLength: 3
+              pattern: ^[^/]+/[^/]+$
               type: string
           required:
           - repository

config/manager/kustomization.yaml

@@ -1,2 +1,8 @@
 resources:
 - manager.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+images:
+- name: controller
+  newName: summerwind/actions-runner-controller
+  newTag: latest

config/rbac/role.yaml

@@ -26,3 +26,12 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - ""
+  resources:
+  - pod
+  verbs:
+  - delete
+  - get
+  - patch
+  - update

controllers/runner_controller.go

@@ -55,6 +55,7 @@ type RunnerReconciler struct {
 
 // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runners,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runners/status,verbs=get;update;patch
+// +kubebuilder:rbac:groups=core,resources=pod,verbs=get;update;patch;delete
 
 func (r *RunnerReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) {
 	ctx := context.Background()