From e24dc1b4ab542ce649300e3d76228eeccfb481ec Mon Sep 17 00:00:00 2001
From: ajanikow <12255597+ajanikow@users.noreply.github.com>
Date: Mon, 11 Aug 2025 09:52:35 +0000
Subject: [PATCH] [Feature] Enable ML Operator and add required Platform Roles

---
 CHANGELOG.md                                  |  1 +
 .../templates/platform-operator/role.yaml     | 23 +++++++++++++++++++
 .../templates/platform-operator/role.yaml     | 23 +++++++++++++++++++
 .../values.yaml                               |  2 +-
 .../templates/platform-operator/role.yaml     | 23 +++++++++++++++++++
 chart/kube-arangodb-enterprise/values.yaml    |  2 +-
 .../templates/platform-operator/role.yaml     | 23 +++++++++++++++++++
 7 files changed, 95 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dffc6cfc6..a9681d98b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,7 @@
 # Change Log
 
 ## [master](https://github.com/arangodb/kube-arangodb/tree/master) (N/A)
+- (Feature) Enable ML Operator and add required Platform Roles
 
 ## [1.3.0](https://github.com/arangodb/kube-arangodb/tree/1.3.0) (2025-08-01)
 - (Feature) (Platform) Storage Debug
diff --git a/chart/kube-arangodb-arm64/templates/platform-operator/role.yaml b/chart/kube-arangodb-arm64/templates/platform-operator/role.yaml
index e549d3ecf..fc0d8d71d 100644
--- a/chart/kube-arangodb-arm64/templates/platform-operator/role.yaml
+++ b/chart/kube-arangodb-arm64/templates/platform-operator/role.yaml
@@ -22,5 +22,28 @@ rules:
     - "arangoplatformservices"
     - "arangoplatformservices/status"
     verbs: ["*"]
+  - apiGroups:
+      - "rbac.authorization.k8s.io"
+    resources:
+      - "roles"
+      - "rolebindings"
+    verbs: [ "*" ]
+  - apiGroups:
+      - "batch"
+    resources:
+      - "cronjobs"
+      - "jobs"
+    verbs: [ "*" ]
+  - apiGroups: [ "apps" ]
+    resources:
+      - "statefulsets"
+    verbs: [ "*" ]
+  - apiGroups: [ "" ]
+    resources:
+      - "pods"
+      - "secrets"
+      - "services"
+      - "serviceaccounts"
+    verbs: [ "*" ]
 {{- end }}
 {{- end }}
\ No newline at end of file
diff --git a/chart/kube-arangodb-enterprise-arm64/templates/platform-operator/role.yaml b/chart/kube-arangodb-enterprise-arm64/templates/platform-operator/role.yaml
index e549d3ecf..fc0d8d71d 100644
--- a/chart/kube-arangodb-enterprise-arm64/templates/platform-operator/role.yaml
+++ b/chart/kube-arangodb-enterprise-arm64/templates/platform-operator/role.yaml
@@ -22,5 +22,28 @@ rules:
     - "arangoplatformservices"
     - "arangoplatformservices/status"
     verbs: ["*"]
+  - apiGroups:
+      - "rbac.authorization.k8s.io"
+    resources:
+      - "roles"
+      - "rolebindings"
+    verbs: [ "*" ]
+  - apiGroups:
+      - "batch"
+    resources:
+      - "cronjobs"
+      - "jobs"
+    verbs: [ "*" ]
+  - apiGroups: [ "apps" ]
+    resources:
+      - "statefulsets"
+    verbs: [ "*" ]
+  - apiGroups: [ "" ]
+    resources:
+      - "pods"
+      - "secrets"
+      - "services"
+      - "serviceaccounts"
+    verbs: [ "*" ]
 {{- end }}
 {{- end }}
\ No newline at end of file
diff --git a/chart/kube-arangodb-enterprise-arm64/values.yaml b/chart/kube-arangodb-enterprise-arm64/values.yaml
index 9e415087a..97878487e 100644
--- a/chart/kube-arangodb-enterprise-arm64/values.yaml
+++ b/chart/kube-arangodb-enterprise-arm64/values.yaml
@@ -33,7 +33,7 @@ operator:
     backup: false
     apps: false
     k8sToK8sClusterSync: false
-    ml: false
+    ml: true
     analytics: false
     networking: true
     scheduler: true
diff --git a/chart/kube-arangodb-enterprise/templates/platform-operator/role.yaml b/chart/kube-arangodb-enterprise/templates/platform-operator/role.yaml
index e549d3ecf..fc0d8d71d 100644
--- a/chart/kube-arangodb-enterprise/templates/platform-operator/role.yaml
+++ b/chart/kube-arangodb-enterprise/templates/platform-operator/role.yaml
@@ -22,5 +22,28 @@ rules:
     - "arangoplatformservices"
     - "arangoplatformservices/status"
     verbs: ["*"]
+  - apiGroups:
+      - "rbac.authorization.k8s.io"
+    resources:
+      - "roles"
+      - "rolebindings"
+    verbs: [ "*" ]
+  - apiGroups:
+      - "batch"
+    resources:
+      - "cronjobs"
+      - "jobs"
+    verbs: [ "*" ]
+  - apiGroups: [ "apps" ]
+    resources:
+      - "statefulsets"
+    verbs: [ "*" ]
+  - apiGroups: [ "" ]
+    resources:
+      - "pods"
+      - "secrets"
+      - "services"
+      - "serviceaccounts"
+    verbs: [ "*" ]
 {{- end }}
 {{- end }}
\ No newline at end of file
diff --git a/chart/kube-arangodb-enterprise/values.yaml b/chart/kube-arangodb-enterprise/values.yaml
index 7b19532fc..b55cdc66c 100644
--- a/chart/kube-arangodb-enterprise/values.yaml
+++ b/chart/kube-arangodb-enterprise/values.yaml
@@ -33,7 +33,7 @@ operator:
     backup: false
     apps: false
     k8sToK8sClusterSync: false
-    ml: false
+    ml: true
     analytics: false
     networking: true
     scheduler: true
diff --git a/chart/kube-arangodb/templates/platform-operator/role.yaml b/chart/kube-arangodb/templates/platform-operator/role.yaml
index e549d3ecf..fc0d8d71d 100644
--- a/chart/kube-arangodb/templates/platform-operator/role.yaml
+++ b/chart/kube-arangodb/templates/platform-operator/role.yaml
@@ -22,5 +22,28 @@ rules:
     - "arangoplatformservices"
     - "arangoplatformservices/status"
     verbs: ["*"]
+  - apiGroups:
+      - "rbac.authorization.k8s.io"
+    resources:
+      - "roles"
+      - "rolebindings"
+    verbs: [ "*" ]
+  - apiGroups:
+      - "batch"
+    resources:
+      - "cronjobs"
+      - "jobs"
+    verbs: [ "*" ]
+  - apiGroups: [ "apps" ]
+    resources:
+      - "statefulsets"
+    verbs: [ "*" ]
+  - apiGroups: [ "" ]
+    resources:
+      - "pods"
+      - "secrets"
+      - "services"
+      - "serviceaccounts"
+    verbs: [ "*" ]
 {{- end }}
 {{- end }}
\ No newline at end of file