Merge pull request #14 from kubesphere-sigs/rbac-secret

Add secrtes read permission request to the controller
kubesphere-sigs · Nov 3, 2021 · 6eba328 · 6eba328
2 parents 7804fc0 + 6d0dd19
commit 6eba328
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 8 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -6,6 +6,14 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - devops.kubesphere.io
   resources:
@@ -32,11 +40,3 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-    - ""
-  resources:
-    - secrets
-  verbs:
-    - get
-    - watch
-    - list
diff --git a/controllers/releaser_controller.go b/controllers/releaser_controller.go
@@ -59,6 +59,7 @@ type ReleaserReconciler struct {
 //+kubebuilder:rbac:groups=devops.kubesphere.io,resources=releasers,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=devops.kubesphere.io,resources=releasers/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=devops.kubesphere.io,resources=releasers/finalizers,verbs=update
+//+kubebuilder:rbac:groups="",resources=secrets,verbs=get;watch;list
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.