Skip to content

Conversation

@hmbill694
Copy link
Collaborator

Overview

During testing yesterday we noticed that there are RBAC errors occurring when creating events for the VMDIs. Under the hood events are "sibling" objects to the resources they reference and as such require their own explicit RBAC configuration.

// +kubebuilder:scaffold:scheme
}

// GLOBAL RBAC FOR ENTIRE APPLICATION
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a little callout here. These comments that are used to generate RBAC by kubebuilder aren't location specific. Having them anywhere in the codebase means they get picked up. I would like to establish the convention though that if all controllers are going to use it a given resource (like events) that we put it in the main.go file

@hmbill694 hmbill694 merged commit b854f70 into main Dec 9, 2025
4 checks passed
@hmbill694 hmbill694 deleted the fix/enable-event-rbac branch December 9, 2025 19:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants