Add watch for CRD to role

Signed-off-by: Will Kutler <wkutler@redhat.com>
open-cluster-management-io · Feb 22, 2023 · d885a7c · d885a7c
1 parent a491bbe
commit d885a7c
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/controllers/templatesync/template_sync.go b/controllers/templatesync/template_sync.go
@@ -49,7 +49,7 @@ var log = ctrl.Log.WithName(ControllerName)
 
 //+kubebuilder:rbac:groups=policy.open-cluster-management.io,resources=*,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=core,resources=events,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=list
+//+kubebuilder:rbac:groups=apiextensions.k8s.io,resources=customresourcedefinitions,verbs=list;watch
 
 // Setup sets up the controller
 func (r *PolicyReconciler) Setup(mgr ctrl.Manager, depEvents *source.Channel) error {

diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -54,6 +54,7 @@ rules:
   - customresourcedefinitions
   verbs:
   - list
+  - watch
 - apiGroups:
   - ""
   resources:

diff --git a/deploy/rbac/role.yaml b/deploy/rbac/role.yaml
@@ -12,6 +12,7 @@ rules:
   - customresourcedefinitions
   verbs:
   - list
+  - watch
 - apiGroups:
   - ""
   resources: