Skip to content

Commit b7717cb

Browse files
authored
Fix RBAC: allow controller to emit events (#157)
1 parent f53a8e6 commit b7717cb

File tree

2 files changed

+8
-0
lines changed

2 files changed

+8
-0
lines changed

config/rbac/role.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,13 @@ kind: ClusterRole
44
metadata:
55
name: manager-role
66
rules:
7+
- apiGroups:
8+
- ""
9+
resources:
10+
- events
11+
verbs:
12+
- create
13+
- patch
714
- apiGroups:
815
- ""
916
resources:

controllers/node_force_drain_controller.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,7 @@ type NodeForceDrainReconciler struct {
6868
//+kubebuilder:rbac:groups="apps",resources=daemonsets,verbs=get;list;watch
6969
//+kubebuilder:rbac:groups=managedupgrade.appuio.io,resources=nodeforcedrains,verbs=get;list;watch;update;patch
7070
//+kubebuilder:rbac:groups=managedupgrade.appuio.io,resources=nodeforcedrains/status,verbs=get;update;patch
71+
//+kubebuilder:rbac:groups=core,resources=events,verbs=create;patch
7172

7273
// Reconcile reacts to Node changes and force drains nodes after a certain period of time.
7374
func (r *NodeForceDrainReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {

0 commit comments

Comments
 (0)