Merge pull request #6 from suskin/add-permissions

permissions: add permissions for mysql and kubernetes resources
crossplane · Sep 10, 2019 · faa5a59 · faa5a59
2 parents ef7bb4d + 28ef29b
commit faa5a59
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -6,6 +6,30 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - compute.crossplane.io
+  resources:
+  - kubernetesclusters
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - database.crossplane.io
+  resources:
+  - mysqlinstances
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - wordpress.samples.stacks.crossplane.io
   resources:
@@ -26,3 +50,15 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - workload.crossplane.io
+  resources:
+  - kubernetesapplication
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
diff --git a/controllers/wordpressinstance_controller.go b/controllers/wordpressinstance_controller.go
@@ -44,6 +44,9 @@ type WordpressInstanceReconciler struct {
 
 // +kubebuilder:rbac:groups=wordpress.samples.stacks.crossplane.io,resources=wordpressinstances,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=wordpress.samples.stacks.crossplane.io,resources=wordpressinstances/status,verbs=get;update;patch
+// +kubebuilder:rbac:groups=compute.crossplane.io,resources=kubernetesclusters,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=database.crossplane.io,resources=mysqlinstances,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=workload.crossplane.io,resources=kubernetesapplication,verbs=get;list;watch;create;update;patch;delete
 
 func (r *WordpressInstanceReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error) {
 	ctx := context.Background()