Skip to content

Commit f553c5d

Browse files
committed
add create verb to boxcutter preflight
1 parent a307a6d commit f553c5d

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

cmd/operator-controller/main.go

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -617,7 +617,10 @@ func (c *boxcutterReconcilerConfigurator) Configure(ceReconciler *controllers.Cl
617617
// determine if PreAuthorizer should be enabled based on feature gate
618618
var preAuth authorization.PreAuthorizer
619619
if features.OperatorControllerFeatureGate.Enabled(features.PreflightPermissions) {
620-
preAuth = authorization.NewRBACPreAuthorizer(c.mgr.GetClient())
620+
preAuth = authorization.NewRBACPreAuthorizer(
621+
c.mgr.GetClient(),
622+
authorization.WithNamespacedCollectionVerbs("create"),
623+
)
621624
}
622625

623626
// TODO: better scheme handling - which types do we want to support?

0 commit comments

Comments
 (0)