add limitranges and storageclasses rbacs to orch explorer feature (#1166

) (#1167)
DataDog · May 3, 2024 · 9d259b6 · 9d259b6
1 parent e61af60
commit 9d259b6
Showing 1 changed file with 8 additions and 14 deletions.
diff --git a/controllers/datadogagent/feature/orchestratorexplorer/rbac.go b/controllers/datadogagent/feature/orchestratorexplorer/rbac.go
@@ -44,6 +44,10 @@ func getRBACPolicyRules(logger logr.Logger, crs []string) []rbacv1.PolicyRule {
 				rbac.PodsResource,
 				rbac.ServicesResource,
 				rbac.NodesResource,
+				rbac.PersistentVolumesResource,
+				rbac.PersistentVolumeClaimsResource,
+				rbac.ServiceAccountResource,
+				rbac.LimitRangesResource,
 			},
 		},
 		{
@@ -62,20 +66,6 @@ func getRBACPolicyRules(logger logr.Logger, crs []string) []rbacv1.PolicyRule {
 				rbac.CronjobsResource,
 			},
 		},
-
-		{
-			APIGroups: []string{rbac.CoreAPIGroup},
-			Resources: []string{
-				rbac.PersistentVolumesResource,
-				rbac.PersistentVolumeClaimsResource,
-			},
-		},
-		{
-			APIGroups: []string{rbac.CoreAPIGroup},
-			Resources: []string{
-				rbac.ServiceAccountResource,
-			},
-		},
 		{
 			APIGroups: []string{rbac.RbacAPIGroup},
 			Resources: []string{
@@ -101,6 +91,10 @@ func getRBACPolicyRules(logger logr.Logger, crs []string) []rbacv1.PolicyRule {
 			APIGroups: []string{rbac.AutoscalingAPIGroup},
 			Resources: []string{rbac.HorizontalPodAutoscalersRecource},
 		},
+		{
+			APIGroups: []string{rbac.StorageAPIGroup},
+			Resources: []string{rbac.StorageClassesResource},
+		},
 	}
 
 	groupResources := mapAPIGroupsResources(logger, crs)