From 0dca9ade8eb80ed13dead0673a73fb2711f56088 Mon Sep 17 00:00:00 2001 From: jiahui Date: Tue, 15 Oct 2024 16:37:55 +0800 Subject: [PATCH] fix the init job to create user permissions --- controllers/account/config/rbac/role.yaml | 1 + controllers/account/controllers/account_controller.go | 2 +- controllers/account/deploy/manifests/deploy.yaml | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/controllers/account/config/rbac/role.yaml b/controllers/account/config/rbac/role.yaml index 723a2837e5d..ae3b9773c50 100644 --- a/controllers/account/config/rbac/role.yaml +++ b/controllers/account/config/rbac/role.yaml @@ -337,6 +337,7 @@ rules: resources: - users verbs: + - create - get - list - watch diff --git a/controllers/account/controllers/account_controller.go b/controllers/account/controllers/account_controller.go index ff5d6c012d7..7024d150cfb 100644 --- a/controllers/account/controllers/account_controller.go +++ b/controllers/account/controllers/account_controller.go @@ -86,7 +86,7 @@ type AccountReconciler struct { //+kubebuilder:rbac:groups=account.sealos.io,resources=accounts/finalizers,verbs=update //+kubebuilder:rbac:groups=core,resources=resourcequotas,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=core,resources=limitranges,verbs=get;list;watch;create;update;patch;delete -//+kubebuilder:rbac:groups=user.sealos.io,resources=users,verbs=get;list;watch +//+kubebuilder:rbac:groups=user.sealos.io,resources=users,verbs=create;get;list;watch //+kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update;patch;delete diff --git a/controllers/account/deploy/manifests/deploy.yaml b/controllers/account/deploy/manifests/deploy.yaml index 0dbf09c8853..6ae9808efe5 100644 --- a/controllers/account/deploy/manifests/deploy.yaml +++ b/controllers/account/deploy/manifests/deploy.yaml @@ -550,6 +550,7 @@ rules: resources: - users verbs: + - create - get - list - watch