devstar/devstar-devcontainer-operator
2
0
Fork 0
mirror of https://gitee.com/devstar/devstar-devcontainer-operator synced 2025-11-02 03:40:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Compare commits

base: devstar:42d9efbce0861ede26994bc7939dd99b69289fa4
Branches Tags
devstar:main
...
compare: devstar:15c626593b1d94944ed6515b0ed6c32c939c6efc
Branches Tags
devstar:main

2 Commits
42d9efbce0 ... 15c626593b

Author SHA1 Message Date
Mingchen Dai
15c626593b fix RBAC using '+kubebuilder:rbac:' prefix
All checks were successful
DevStar DevContainer Operator CI Pipeline - main branch / build-and-push-devstar-devcontainer-operator (push) Successful in 1m5s
Details
2024-09-30 09:56:04 +00:00
Mingchen Dai
9335470b9b fix insufficient RBAC Role rights 2024-09-30 09:44:18 +00:00
2 changed files with 22 additions and 0 deletions
Expand all files Collapse all files

20
config/rbac/role.yaml
View File

@@ -4,6 +4,26 @@ kind: ClusterRole
metadata: metadata:
name: manager-role name: manager-role
rules: rules:
- apiGroups:
- ""
resources:
- services
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- apps
resources:
- statefulsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups: - apiGroups:
- devcontainer.devstar.cn - devcontainer.devstar.cn
resources: resources:

2
internal/controller/devcontainerapp_controller.go
View File

@@ -43,6 +43,8 @@ type DevcontainerAppReconciler struct {
// +kubebuilder:rbac:groups=devcontainer.devstar.cn,resources=devcontainerapps,verbs=get;list;watch;create;update;patch;delete // +kubebuilder:rbac:groups=devcontainer.devstar.cn,resources=devcontainerapps,verbs=get;list;watch;create;update;patch;delete
// +kubebuilder:rbac:groups=devcontainer.devstar.cn,resources=devcontainerapps/status,verbs=get;update;patch // +kubebuilder:rbac:groups=devcontainer.devstar.cn,resources=devcontainerapps/status,verbs=get;update;patch
// +kubebuilder:rbac:groups=devcontainer.devstar.cn,resources=devcontainerapps/finalizers,verbs=update // +kubebuilder:rbac:groups=devcontainer.devstar.cn,resources=devcontainerapps/finalizers,verbs=update
// +kubebuilder:rbac:groups=apps,resources=statefulsets,verbs=create;delete;get;list;watch
// +kubebuilder:rbac:groups="",resources=services,verbs=create;delete;get;list;watch
// Reconcile is part of the main kubernetes reconciliation loop which aims to // Reconcile is part of the main kubernetes reconciliation loop which aims to
// move the current state of the cluster closer to the desired state. // move the current state of the cluster closer to the desired state.