Add 'list' and 'update' configmaps/secrets to workspace SA role

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
devfile · Oct 3, 2023 · 96b9c65 · 96b9c65
1 parent 1db91dc
commit 96b9c65
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/docs/workspace-capabilities.md b/docs/workspace-capabilities.md
@@ -37,17 +37,21 @@ rules:
   - secrets
   verbs:
   - get
+  - list
   - create
   - patch
+  - update
   - delete
 - apiGroups:
   - ""
   resources:
   - configmaps
   verbs:
   - get
+  - list
   - create
   - patch
+  - update
   - delete
 - apiGroups:
   - workspace.devfile.io

diff --git a/pkg/provision/workspace/rbac/role.go b/pkg/provision/workspace/rbac/role.go
@@ -95,12 +95,12 @@ func generateDefaultRole(namespace string) *rbacv1.Role {
 			{
 				Resources: []string{"secrets"},
 				APIGroups: []string{""},
-				Verbs:     []string{"get", "create", "patch", "delete"},
+				Verbs:     []string{"get", "list", "create", "patch", "update", "delete"},
 			},
 			{
 				Resources: []string{"configmaps"},
 				APIGroups: []string{""},
-				Verbs:     []string{"get", "create", "patch", "delete"},
+				Verbs:     []string{"get", "list", "create", "patch", "update", "delete"},
 			},
 			{
 				Resources: []string{"devworkspaces"},