diff --git a/config/dr-cluster/rbac/role.yaml b/config/dr-cluster/rbac/role.yaml index 480bee100..eb6851d99 100644 --- a/config/dr-cluster/rbac/role.yaml +++ b/config/dr-cluster/rbac/role.yaml @@ -395,6 +395,22 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - deployments + verbs: + - get + - list + - watch --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 3f7cea04f..a0d5be99c 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -139,6 +139,14 @@ rules: - placements/finalizers verbs: - update +- apiGroups: + - "" + resources: + - deployments + verbs: + - get + - list + - watch - apiGroups: - "" resources: @@ -191,6 +199,14 @@ rules: - patch - update - watch +- apiGroups: + - "" + resources: + - statefulsets + verbs: + - get + - list + - watch - apiGroups: - groupsnapshot.storage.k8s.io resources: diff --git a/internal/controller/volumereplicationgroup_controller.go b/internal/controller/volumereplicationgroup_controller.go index 5c1e2c66a..a6b2772ef 100644 --- a/internal/controller/volumereplicationgroup_controller.go +++ b/internal/controller/volumereplicationgroup_controller.go @@ -366,6 +366,8 @@ func filterPVC(reader client.Reader, pvc *corev1.PersistentVolumeClaim, log logr // +kubebuilder:rbac:groups=storage.k8s.io,resources=storageclasses,verbs=get;list;watch;create;update // +kubebuilder:rbac:groups=storage.k8s.io,resources=volumeattachments,verbs=get;list;watch // +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch +// +kubebuilder:rbac:groups=core,resources=deployments,verbs=get;list;watch +// +kubebuilder:rbac:groups=core,resources=statefulsets,verbs=get;list;watch // +kubebuilder:rbac:groups=core,resources=persistentvolumeclaims,verbs=get;list;watch;create;update;patch;delete // +kubebuilder:rbac:groups=core,resources=persistentvolumes,verbs=get;list;watch;update;patch;create // +kubebuilder:rbac:groups=volsync.backube,resources=replicationdestinations,verbs=get;list;watch;create;update;patch;delete