feat: enhance rbac manifest for cronjobs

Signed-off-by: Jan Lauber <jan.lauber@protonmail.ch>
janlauber · May 22, 2024 · 0b6d000 · 0b6d000
1 parent 0acf2e1
commit 0b6d000
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -52,6 +52,18 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - batch
+  resources:
+  - cronjobs
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - ""
   resources:

diff --git a/controllers/rollout_controller.go b/controllers/rollout_controller.go
@@ -66,6 +66,8 @@ type RolloutReconciler struct {
 
 //+kubebuilder:rbac:groups="",resources=pods,verbs=get;list;watch
 
+//+kubebuilder:rbac:groups=batch,resources=cronjobs,verbs=get;list;watch;create;update;patch;delete
+
 func (r *RolloutReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
 	log := log.FromContext(ctx)