RBAC add new api's to nfd-master role

Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
kubernetes-sigs · Feb 17, 2022 · a00547b · a00547b
1 parent b4552ce
commit a00547b
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 0 deletions.
diff --git a/build/assets/master/0200_clusterrole.yaml b/build/assets/master/0200_clusterrole.yaml
@@ -13,3 +13,19 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - topology.node.k8s.io
+  resources:
+  - noderesourcetopologies
+  verbs:
+  - create
+  - get
+  - update
+- apiGroups:
+  - nfd.k8s-sigs.io
+  resources:
+  - nodefeaturerules
+  verbs:
+  - get
+  - list
+  - watch
diff --git a/config/rbac/kustomization.yaml b/config/rbac/kustomization.yaml
@@ -33,3 +33,25 @@ patchesJSON6902:
         - use
         resourceNames:
         - nfd-worker
+    - op: add
+      path: /rules/1
+      value:
+        apiGroups:
+        - nfd.k8s-sigs.io
+        resources:
+        - nodefeaturerules
+        verbs:
+        - get
+        - list
+        - watch
+    - op: add
+      path: /rules/2
+      value:
+        apiGroups:
+        - topology.node.k8s.io
+        resources:
+        - noderesourcetopologies
+        verbs:
+        - create
+        - get
+        - update