Fix MCP permissions to allow pausing and unpausing pools (#70)

bastjan · web-flow · commit 3792eaa09d23 · 2024-04-08T17:22:05.000+02:00
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -47,6 +47,8 @@ rules:
   verbs:
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
   - managedupgrade.appuio.io
diff --git a/controllers/upgrading_metrics.go b/controllers/upgrading_metrics.go
@@ -22,7 +22,7 @@ import (
 )
 
 //+kubebuilder:rbac:groups=config.openshift.io,resources=clusterversions,verbs=get;list;watch;update;patch
-//+kubebuilder:rbac:groups=machineconfiguration.openshift.io,resources=machineconfigpools,verbs=get;list;watch
+//+kubebuilder:rbac:groups=machineconfiguration.openshift.io,resources=machineconfigpools,verbs=get;list;watch;update;patch
 
 var clusterUpgradingDesc = prometheus.NewDesc(
 	MetricsNamespace+"_cluster_upgrading",

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,7 @@ import (`
`22`	`22`	`)`
`23`	`23`
`24`	`24`	`//+kubebuilder:rbac:groups=config.openshift.io,resources=clusterversions,verbs=get;list;watch;update;patch`
`25`		`-//+kubebuilder:rbac:groups=machineconfiguration.openshift.io,resources=machineconfigpools,verbs=get;list;watch`
	`25`	`+//+kubebuilder:rbac:groups=machineconfiguration.openshift.io,resources=machineconfigpools,verbs=get;list;watch;update;patch`
`26`	`26`
`27`	`27`	`var clusterUpgradingDesc = prometheus.NewDesc(`
`28`	`28`	`MetricsNamespace+"_cluster_upgrading",`