Test additional permissions

Signed-off-by: machadovilaca <machadovilaca@gmail.com>
kubevirt · Jul 11, 2024 · 9640e85 · 9640e85
1 parent d34065c
commit 9640e85
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 2 deletions.
diff --git a/deploy/cluster_role.yaml b/deploy/cluster_role.yaml
@@ -1149,6 +1149,7 @@ rules:
   - monitoring.coreos.com
   resources:
   - alertmanagers
+  - alertmanagers/api
   verbs:
   - '*'
 ---

diff --git a/...rged/1.13.0/manifests/kubevirt-hyperconverged-operator.v1.13.0.clusterserviceversion.yaml b/...rged/1.13.0/manifests/kubevirt-hyperconverged-operator.v1.13.0.clusterserviceversion.yaml
@@ -543,6 +543,7 @@ spec:
           - monitoring.coreos.com
           resources:
           - alertmanagers
+          - alertmanagers/api
           verbs:
           - '*'
         serviceAccountName: hyperconverged-cluster-operator

diff --git a/...rged/1.13.0/manifests/kubevirt-hyperconverged-operator.v1.13.0.clusterserviceversion.yaml b/...rged/1.13.0/manifests/kubevirt-hyperconverged-operator.v1.13.0.clusterserviceversion.yaml
@@ -9,7 +9,7 @@ metadata:
     certified: "false"
     console.openshift.io/disable-operand-delete: "true"
     containerImage: quay.io/kubevirt/hyperconverged-cluster-operator:1.13.0-unstable
-    createdAt: "2024-07-09 14:37:18"
+    createdAt: "2024-07-11 09:35:24"
     description: A unified operator deploying and controlling KubeVirt and its supporting
       operators with opinionated defaults
     features.operators.openshift.io/cnf: "false"
@@ -543,6 +543,7 @@ spec:
           - monitoring.coreos.com
           resources:
           - alertmanagers
+          - alertmanagers/api
           verbs:
           - '*'
         serviceAccountName: hyperconverged-cluster-operator

diff --git a/pkg/components/components.go b/pkg/components/components.go
@@ -577,7 +577,7 @@ func GetClusterPermissions() []rbacv1.PolicyRule {
 		},
 		{
 			APIGroups: stringListToSlice("monitoring.coreos.com"),
-			Resources: stringListToSlice("alertmanagers"),
+			Resources: stringListToSlice("alertmanagers", "alertmanagers/api"),
 			Verbs:     stringListToSlice("*"),
 		},
 	}