Add role for secrets to manager

modoki-paas · Sep 17, 2020 · 87b2969 · 87b2969
1 parent 5a7eae1
commit 87b2969
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -6,6 +6,33 @@ metadata:
   creationTimestamp: null
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ghapp.tsuzu.dev
+  resources:
+  - clustergithubapps
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - ghapp.tsuzu.dev
+  resources:
+  - clustergithubapps/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - ghapp.tsuzu.dev
   resources:

diff --git a/controllers/installation_controller.go b/controllers/installation_controller.go
@@ -42,6 +42,7 @@ type InstallationReconciler struct {
 // +kubebuilder:rbac:groups=ghapp.tsuzu.dev,resources=installations/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=ghapp.tsuzu.dev,resources=clustergithubapps,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=ghapp.tsuzu.dev,resources=clustergithubapps/status,verbs=get;update;patch
+// +kubebuilder:rbac:groups=core,resources=secrets,verbs=get;list
 
 func (r *InstallationReconciler) Reconcile(req ctrl.Request) (res ctrl.Result, err error) {
 	ctx := context.Background()