From 5efdc6efe6809163fb935f8e4c8dee764445ce97 Mon Sep 17 00:00:00 2001 From: Moto Ishizawa Date: Fri, 27 Mar 2020 23:25:37 +0900 Subject: [PATCH] Add permission to create/patch events resource --- config/rbac/role.yaml | 7 +++++++ controllers/runner_controller.go | 1 + controllers/runnerdeployment_controller.go | 1 + controllers/runnerreplicaset_controller.go | 1 + 4 files changed, 10 insertions(+) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 49606919..87241a59 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -66,6 +66,13 @@ rules: - get - patch - update +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch - apiGroups: - "" resources: diff --git a/controllers/runner_controller.go b/controllers/runner_controller.go index 3a2b5bcf..7904be83 100644 --- a/controllers/runner_controller.go +++ b/controllers/runner_controller.go @@ -72,6 +72,7 @@ type RunnerReconciler struct { // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runners,verbs=get;list;watch;create;update;patch;delete // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runners/status,verbs=get;update;patch // +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch;create;update;patch;delete +// +kubebuilder:rbac:groups=core,resources=events,verbs=create;patch func (r *RunnerReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) { ctx := context.Background() diff --git a/controllers/runnerdeployment_controller.go b/controllers/runnerdeployment_controller.go index 04bf289f..2c6c056e 100644 --- a/controllers/runnerdeployment_controller.go +++ b/controllers/runnerdeployment_controller.go @@ -54,6 +54,7 @@ type RunnerDeploymentReconciler struct { // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runnerdeployments/status,verbs=get;update;patch // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runnerreplicasets,verbs=get;list;watch;create;update;patch;delete // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runnerreplicasets/status,verbs=get;update;patch +// +kubebuilder:rbac:groups=core,resources=events,verbs=create;patch func (r *RunnerDeploymentReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) { ctx := context.Background() diff --git a/controllers/runnerreplicaset_controller.go b/controllers/runnerreplicaset_controller.go index 4fa2e4c8..767dbeff 100644 --- a/controllers/runnerreplicaset_controller.go +++ b/controllers/runnerreplicaset_controller.go @@ -45,6 +45,7 @@ type RunnerReplicaSetReconciler struct { // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runnerreplicasets/status,verbs=get;update;patch // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runners,verbs=get;list;watch;create;update;patch;delete // +kubebuilder:rbac:groups=actions.summerwind.dev,resources=runners/status,verbs=get;update;patch +// +kubebuilder:rbac:groups=core,resources=events,verbs=create;patch func (r *RunnerReplicaSetReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) { ctx := context.Background()