Fix RBAC permissions for visibility into Local Queues

kubernetes-sigs · Dec 6, 2023 · 006d62c · 006d62c
1 parent d91a7d5
commit 006d62c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/charts/kueue/templates/rbac/pending_workloads_lq_viewer_role.yaml b/charts/kueue/templates/rbac/pending_workloads_lq_viewer_role.yaml
@@ -1,9 +1,8 @@
 # permissions for end users to view pending workloads.
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: '{{ include "kueue.fullname" . }}-pending-workloads-lq-viewer-role'
-  namespace: '{{ .Release.Namespace }}'
   labels:
     rbac.kueue.x-k8s.io/batch-admin: "true"
     rbac.kueue.x-k8s.io/batch-user: "true"

diff --git a/config/components/rbac/pending_workloads_lq_viewer_role.yaml b/config/components/rbac/pending_workloads_lq_viewer_role.yaml
@@ -1,9 +1,8 @@
 # permissions for end users to view pending workloads.
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
   name: pending-workloads-lq-viewer-role
-  namespace: default
   labels:
     rbac.kueue.x-k8s.io/batch-admin: "true"
     rbac.kueue.x-k8s.io/batch-user: "true"