[release-v1.43] Expose all CDI CRDs to cluster-readers (#2246)

Manual backport of #2245 Signed-off-by: Arnon Gilboa <agilboa@redhat.com>
kubevirt · Apr 26, 2022 · bd6b58a · bd6b58a
1 parent 57a377b
commit bd6b58a
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/pkg/operator/resources/cluster/rbac.go b/pkg/operator/resources/cluster/rbac.go
@@ -85,7 +85,12 @@ func getViewPolicyRules() []rbacv1.PolicyRule {
 				"cdi.kubevirt.io",
 			},
 			Resources: []string{
+				"cdiconfigs",
+				"dataimportcrons",
+				"datasources",
 				"datavolumes",
+				"objecttransfers",
+				"storageprofiles",
 			},
 			Verbs: []string{
 				"get",

diff --git a/tests/rbac_test.go b/tests/rbac_test.go
@@ -255,7 +255,12 @@ var _ = Describe("Aggregated role definition tests", func() {
 				"cdi.kubevirt.io",
 			},
 			Resources: []string{
+				"cdiconfigs",
+				"dataimportcrons",
+				"datasources",
 				"datavolumes",
+				"objecttransfers",
+				"storageprofiles",
 			},
 			Verbs: []string{
 				"get",