diff --git a/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml b/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml index 0892b296b..b77d733b2 100644 --- a/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml +++ b/bundle/next/eclipse-che-preview-openshift/manifests/che-operator.clusterserviceversion.yaml @@ -76,7 +76,7 @@ metadata: operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 repository: https://github.com/eclipse-che/che-operator support: Eclipse Foundation - name: eclipse-che-preview-openshift.v7.50.0-620.next + name: eclipse-che-preview-openshift.v7.50.0-621.next namespace: placeholder spec: apiservicedefinitions: {} @@ -539,6 +539,7 @@ spec: - pods/exec verbs: - create + - get - apiGroups: - apps resources: @@ -1387,7 +1388,7 @@ spec: maturity: stable provider: name: Eclipse Foundation - version: 7.50.0-620.next + version: 7.50.0-621.next webhookdefinitions: - admissionReviewVersions: - v1 diff --git a/config/rbac/cluster_role.yaml b/config/rbac/cluster_role.yaml index d41749e4f..35a40fa6f 100644 --- a/config/rbac/cluster_role.yaml +++ b/config/rbac/cluster_role.yaml @@ -154,6 +154,7 @@ rules: - pods/exec verbs: - create + - get - apiGroups: - apps resources: diff --git a/deploy/deployment/kubernetes/combined.yaml b/deploy/deployment/kubernetes/combined.yaml index 58d6b7d0c..a969bef25 100644 --- a/deploy/deployment/kubernetes/combined.yaml +++ b/deploy/deployment/kubernetes/combined.yaml @@ -3933,6 +3933,7 @@ rules: - pods/exec verbs: - create + - get - apiGroups: - apps resources: diff --git a/deploy/deployment/kubernetes/objects/che-operator.ClusterRole.yaml b/deploy/deployment/kubernetes/objects/che-operator.ClusterRole.yaml index 0c62c51d7..10b99bd3d 100644 --- a/deploy/deployment/kubernetes/objects/che-operator.ClusterRole.yaml +++ b/deploy/deployment/kubernetes/objects/che-operator.ClusterRole.yaml @@ -153,6 +153,7 @@ rules: - pods/exec verbs: - create + - get - apiGroups: - apps resources: diff --git a/deploy/deployment/openshift/combined.yaml b/deploy/deployment/openshift/combined.yaml index 2523026bd..e175bb474 100644 --- a/deploy/deployment/openshift/combined.yaml +++ b/deploy/deployment/openshift/combined.yaml @@ -3933,6 +3933,7 @@ rules: - pods/exec verbs: - create + - get - apiGroups: - apps resources: diff --git a/deploy/deployment/openshift/objects/che-operator.ClusterRole.yaml b/deploy/deployment/openshift/objects/che-operator.ClusterRole.yaml index 0c62c51d7..10b99bd3d 100644 --- a/deploy/deployment/openshift/objects/che-operator.ClusterRole.yaml +++ b/deploy/deployment/openshift/objects/che-operator.ClusterRole.yaml @@ -153,6 +153,7 @@ rules: - pods/exec verbs: - create + - get - apiGroups: - apps resources: diff --git a/helmcharts/next/templates/che-operator.ClusterRole.yaml b/helmcharts/next/templates/che-operator.ClusterRole.yaml index 0c62c51d7..10b99bd3d 100644 --- a/helmcharts/next/templates/che-operator.ClusterRole.yaml +++ b/helmcharts/next/templates/che-operator.ClusterRole.yaml @@ -153,6 +153,7 @@ rules: - pods/exec verbs: - create + - get - apiGroups: - apps resources: diff --git a/pkg/deploy/rbac/workspace_permissions.go b/pkg/deploy/rbac/workspace_permissions.go index 2a8b2e76b..50a2e5a2a 100644 --- a/pkg/deploy/rbac/workspace_permissions.go +++ b/pkg/deploy/rbac/workspace_permissions.go @@ -269,7 +269,7 @@ func (c *WorkspacePermissionsReconciler) getWorkspacesPolicies() []rbacv1.Policy { APIGroups: []string{""}, Resources: []string{"pods/exec"}, - Verbs: []string{"create"}, + Verbs: []string{"get", "create"}, }, { APIGroups: []string{""},