From 536bbca77f0b654d6567c84fbf8b6df91cfaeef1 Mon Sep 17 00:00:00 2001 From: Francesco Ilario Date: Thu, 10 Aug 2023 19:48:56 +0200 Subject: [PATCH] Add serviceclaims/status rights to ControlPlane (#40) On application namespace creation graph `serviceclaims/status` rights to ControlPlane's service account Signed-off-by: Francesco Ilario --- scripts/src/primazactl/kube/roles/primazaroles.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/scripts/src/primazactl/kube/roles/primazaroles.py b/scripts/src/primazactl/kube/roles/primazaroles.py index 5a024eb..66ce6d5 100644 --- a/scripts/src/primazactl/kube/roles/primazaroles.py +++ b/scripts/src/primazactl/kube/roles/primazaroles.py @@ -52,6 +52,10 @@ def get_primaza_namespace_role(role_name: str, resources=["configmaps"], verbs=["get", "list", "update", "delete"], resource_names=["primaza-agentapp-config"]), + client.V1PolicyRule( + api_groups=["primaza.io"], + resources=["serviceclaims/status"], + verbs=["get", "update"]), # pull synchronization strategy client.V1PolicyRule( api_groups=["primaza.io"],