From 91544cc063c4f6d48c2607d3cc106cd656312718 Mon Sep 17 00:00:00 2001 From: Sebastian Bernauer Date: Thu, 17 Jul 2025 14:14:38 +0200 Subject: [PATCH 1/2] fix: Add RBAC permission to patch events --- deploy/helm/superset-operator/templates/roles.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/deploy/helm/superset-operator/templates/roles.yaml b/deploy/helm/superset-operator/templates/roles.yaml index 93ecba02..d1004634 100644 --- a/deploy/helm/superset-operator/templates/roles.yaml +++ b/deploy/helm/superset-operator/templates/roles.yaml @@ -165,6 +165,7 @@ rules: - events verbs: - create + - patch {{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }} - apiGroups: - security.openshift.io From d654175e8098c6948a81ae66f1074bfe4464821d Mon Sep 17 00:00:00 2001 From: Sebastian Bernauer Date: Mon, 21 Jul 2025 10:37:36 +0200 Subject: [PATCH 2/2] changelog --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index f79d794f..1c8f67aa 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -34,6 +34,8 @@ - The default Kubernetes cluster domain name is now fetched from the kubelet API unless explicitly configured. - This requires operators to have the RBAC permission to get nodes/proxy in the apiGroup "". The helm-chart takes care of this. - The CLI argument `--kubernetes-node-name` or env variable `KUBERNETES_NODE_NAME` needs to be set. The helm-chart takes care of this. +- The operator helm-chart now grants RBAC `patch` permissions on `events.k8s.io/events`, + so events can be aggregated (e.g. "error happened 10 times over the last 5 minutes") ([#649]). ### Fixed @@ -59,6 +61,7 @@ [#643]: https://github.com/stackabletech/superset-operator/pull/643 [#644]: https://github.com/stackabletech/superset-operator/pull/644 [#646]: https://github.com/stackabletech/superset-operator/pull/646 +[#649]: https://github.com/stackabletech/superset-operator/pull/649 ## [25.3.0] - 2025-03-21