fix(limb): add events creation permission

closes #59
cnrancher · May 9, 2020 · ee19203 · ee19203
1 parent ff8b36e
commit ee19203
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 0 deletions.
diff --git a/deploy/e2e/all_in_one.yaml b/deploy/e2e/all_in_one.yaml
@@ -329,6 +329,13 @@ metadata:
     app.kubernetes.io/version: master
   name: octopus-manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/deploy/e2e/all_in_one_without_webhook.yaml b/deploy/e2e/all_in_one_without_webhook.yaml
@@ -246,6 +246,13 @@ metadata:
     app.kubernetes.io/version: master
   name: octopus-manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/deploy/manifests/rbac/role.yaml b/deploy/manifests/rbac/role.yaml
@@ -6,6 +6,13 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - ""
   resources:

diff --git a/pkg/limb/controller/devicelink.go b/pkg/limb/controller/devicelink.go
@@ -43,6 +43,7 @@ type DeviceLinkReconciler struct {
 
 // +kubebuilder:rbac:groups=edge.cattle.io,resources=devicelinks,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=edge.cattle.io,resources=devicelinks/status,verbs=get;update;patch
+// +kubebuilder:rbac:groups="",resources=events,verbs=create;patch
 
 func (r *DeviceLinkReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) {
 	var ctx = context.Background()