ASTRACTL-34182:update cluster role so asup can get CRDs (#1725)

* ASTRACTL-34182:update cluster role so asup can get CRDs * ASTRACTL-34182:update role in yaml factory too for cli
NetApp · Sep 19, 2024 · 4aa2414 · 4aa2414
1 parent 397c153
commit 4aa2414
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/cli/k8s_client/yaml_factory.go b/cli/k8s_client/yaml_factory.go
@@ -175,6 +175,9 @@ rules:
  verbs: ["use"]
  resourceNames:
  - {CLUSTER_ROLE_NAME}
+ - apiGroups: ["apiextensions.k8s.io"]
+ resources: ["customresourcedefinitions"]
+ verbs: ["get"]
 `
 
 func GetRoleYAML(namespace, roleName string, labels, controllingCRDetails map[string]string) string {

diff --git a/helm/trident-operator/templates/clusterrole.yaml b/helm/trident-operator/templates/clusterrole.yaml
@@ -408,3 +408,9 @@ rules:
  - use
  resourceNames:
  - tridentoperatorpods
+ - apiGroups:
+ - apiextensions.k8s.io
+ resources:
+ - customresourcedefinitions
+ verbs:
+ - get