diff --git a/bundle/next-all-namespaces/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml b/bundle/next-all-namespaces/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml index 061119ea63..99ef623e7f 100644 --- a/bundle/next-all-namespaces/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml +++ b/bundle/next-all-namespaces/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml @@ -126,7 +126,7 @@ metadata: operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation - name: eclipse-che-preview-openshift.v7.40.0-380.next-all-namespaces + name: eclipse-che-preview-openshift.v7.40.0-381.next-all-namespaces namespace: placeholder spec: apiservicedefinitions: {} @@ -768,6 +768,14 @@ spec: - consoles verbs: - get + - apiGroups: + - "" + resources: + - pods/log + verbs: + - get + - list + - watch - apiGroups: - workspace.devfile.io resources: @@ -947,6 +955,13 @@ spec: - get - list - watch + - apiGroups: + - authorization.k8s.io + resources: + - localsubjectaccessreviews + - subjectaccessreviews + verbs: + - create - apiGroups: - batch resources: @@ -1439,4 +1454,4 @@ spec: maturity: stable provider: name: Eclipse Foundation - version: 7.40.0-380.next-all-namespaces + version: 7.40.0-381.next-all-namespaces diff --git a/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml b/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml index a0032ae5ca..98deb3c44c 100644 --- a/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml +++ b/bundle/next/eclipse-che-preview-kubernetes/manifests/che-operator.clusterserviceversion.yaml @@ -133,7 +133,7 @@ metadata: operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation - name: eclipse-che-preview-kubernetes.v7.40.0-380.next + name: eclipse-che-preview-kubernetes.v7.40.0-381.next namespace: placeholder spec: apiservicedefinitions: {} @@ -755,6 +755,14 @@ spec: - kubernetesimagepullers verbs: - '*' + - apiGroups: + - "" + resources: + - pods/log + verbs: + - get + - list + - watch - apiGroups: - workspace.devfile.io resources: @@ -934,6 +942,13 @@ spec: - get - list - watch + - apiGroups: + - authorization.k8s.io + resources: + - localsubjectaccessreviews + - subjectaccessreviews + verbs: + - create - apiGroups: - batch resources: @@ -1406,4 +1421,4 @@ spec: maturity: stable provider: name: Eclipse Foundation - version: 7.40.0-380.next + version: 7.40.0-381.next diff --git a/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml b/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml index 178a7d2f87..f4fd431ccd 100644 --- a/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml +++ b/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml @@ -126,7 +126,7 @@ metadata: operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation - name: eclipse-che-preview-openshift.v7.40.0-380.next + name: eclipse-che-preview-openshift.v7.40.0-381.next namespace: placeholder spec: apiservicedefinitions: {} @@ -768,6 +768,14 @@ spec: - consoles verbs: - get + - apiGroups: + - "" + resources: + - pods/log + verbs: + - get + - list + - watch - apiGroups: - workspace.devfile.io resources: @@ -947,6 +955,13 @@ spec: - get - list - watch + - apiGroups: + - authorization.k8s.io + resources: + - localsubjectaccessreviews + - subjectaccessreviews + verbs: + - create - apiGroups: - batch resources: @@ -1439,4 +1454,4 @@ spec: maturity: stable provider: name: Eclipse Foundation - version: 7.40.0-380.next + version: 7.40.0-381.next diff --git a/config/rbac/cluster_role.yaml b/config/rbac/cluster_role.yaml index 9caa4678dc..46f050a2fb 100644 --- a/config/rbac/cluster_role.yaml +++ b/config/rbac/cluster_role.yaml @@ -365,6 +365,14 @@ rules: - cluster verbs: - get + - apiGroups: + - '' + resources: + - pods/log + verbs: + - get + - list + - watch ### CHE-OPERATOR ROLES ONLY: END # devworkspace-controller-view-workspaces.ClusterRole.yaml - apiGroups: @@ -550,6 +558,13 @@ rules: - get - list - watch + - apiGroups: + - authorization.k8s.io + resources: + - localsubjectaccessreviews + - subjectaccessreviews + verbs: + - create - apiGroups: - batch resources: diff --git a/helmcharts/next/templates/cluster_role.yaml b/helmcharts/next/templates/cluster_role.yaml index 9caa4678dc..46f050a2fb 100644 --- a/helmcharts/next/templates/cluster_role.yaml +++ b/helmcharts/next/templates/cluster_role.yaml @@ -365,6 +365,14 @@ rules: - cluster verbs: - get + - apiGroups: + - '' + resources: + - pods/log + verbs: + - get + - list + - watch ### CHE-OPERATOR ROLES ONLY: END # devworkspace-controller-view-workspaces.ClusterRole.yaml - apiGroups: @@ -550,6 +558,13 @@ rules: - get - list - watch + - apiGroups: + - authorization.k8s.io + resources: + - localsubjectaccessreviews + - subjectaccessreviews + verbs: + - create - apiGroups: - batch resources: