Add KMM permissions

Signed-off-by: Michail Resvanis <mresvani@redhat.com>
mresvanis · Sep 9, 2022 · 92b9ca4 · 92b9ca4
1 parent 92388a0
commit 92b9ca4
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -31,3 +31,15 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - kmm.sigs.k8s.io
+  resources:
+  - modules
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
diff --git a/controllers/deviceconfig_controller.go b/controllers/deviceconfig_controller.go
@@ -77,6 +77,7 @@ func NewDeviceConfigReconciler(
 //+kubebuilder:rbac:groups=example.com,resources=deviceconfigs,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=example.com,resources=deviceconfigs/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=example.com,resources=deviceconfigs/finalizers,verbs=update
+//+kubebuilder:rbac:groups="kmm.sigs.k8s.io",resources=modules,verbs=get;list;watch;create;update;patch;delete
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.