Fix role: apiGroups is required (#22)

vshn · Mar 11, 2022 · a025cfe · a025cfe
1 parent a743334
commit a025cfe
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -5,7 +5,9 @@ metadata:
   creationTimestamp: null
   name: appuio-keycloak-adapter
 rules:
-- resources:
+- apiGroups:
+  - ""
+  resources:
   - events
   verbs:
   - create

diff --git a/controllers/organization_controller.go b/controllers/organization_controller.go
@@ -45,7 +45,7 @@ var orgFinalizer = "keycloak-adapter.vshn.net/finalizer"
 //+kubebuilder:rbac:groups=appuio.io,resources=organizationmembers/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=appuio.io,resources=organizationmembers/finalizers,verbs=update
 
-//+kubebuilder:rbac:groups=,resources=events,verbs=create;patch
+//+kubebuilder:rbac:groups="",resources=events,verbs=create;patch
 
 // Reconcile reacts on changes of Organizations and OrganizationMembers and mirrors these changes to groups in Keycloak
 func (r *OrganizationReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {