ASTRACTL-34182:update cluster role so asup can get CRDs (#1725)

* ASTRACTL-34182:update cluster role so asup can get CRDs * ASTRACTL-34182:update role in yaml factory too for cli
NetApp · Sep 19, 2024 · 4aa2414 · 4aa2414
1 parent 397c153
commit 4aa2414
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/cli/k8s_client/yaml_factory.go b/cli/k8s_client/yaml_factory.go
@@ -175,6 +175,9 @@ rules:
     verbs: ["use"]
     resourceNames:
       - {CLUSTER_ROLE_NAME}
+  - apiGroups: ["apiextensions.k8s.io"]
+    resources: ["customresourcedefinitions"]
+    verbs: ["get"]
 `
 
 func GetRoleYAML(namespace, roleName string, labels, controllingCRDetails map[string]string) string {

diff --git a/helm/trident-operator/templates/clusterrole.yaml b/helm/trident-operator/templates/clusterrole.yaml
@@ -408,3 +408,9 @@ rules:
       - use
     resourceNames:
       - tridentoperatorpods
+  - apiGroups:
+      - apiextensions.k8s.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - get