Update cluster-profile-manager permission (#33)

Signed-off-by: Rokibul Hasan <[email protected]>
kluster-manager · Oct 7, 2024 · 5ad9217 · 5ad9217
1 parent bea2c65
commit 5ad9217
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/.../cluster-profile-manager/crds/profile.k8s.appscode.com_managedclusterprofilebindings.yaml b/.../cluster-profile-manager/crds/profile.k8s.appscode.com_managedclusterprofilebindings.yaml
@@ -44,6 +44,10 @@ spec:
                         - capg
                         - capz
                         type: string
+                    required:
+                    - clusterName
+                    - namespace
+                    - provider
                     type: object
                   clusterManagers:
                     items:

diff --git a/charts/cluster-profile-manager/crds/profile.k8s.appscode.com_managedclustersetprofiles.yaml b/charts/cluster-profile-manager/crds/profile.k8s.appscode.com_managedclustersetprofiles.yaml
@@ -64,6 +64,8 @@ spec:
                       - name
                       - sourceRef
                       type: object
+                    featureSet:
+                      type: string
                     values:
                       x-kubernetes-preserve-unknown-fields: true
                     valuesFrom:

diff --git a/charts/cluster-profile-manager/templates/k8s/cluster_role.yaml b/charts/cluster-profile-manager/templates/k8s/cluster_role.yaml
@@ -12,7 +12,7 @@ rules:
     resources: ["managedclusters"]
     verbs: ["get", "list", "watch"]
   - apiGroups: ["work.open-cluster-management.io"]
-    resources: ["manifestworks"]
+    resources: ["manifestworks", "manifestworkreplicasets"]
     verbs: ["create", "update", "get", "list", "watch", "delete", "deletecollection", "patch"]
   - apiGroups: [ "cluster.open-cluster-management.io" ]
     resources: [ "managedclustersets" ]