fix(yurt-manager): add clusterrole for nodes/status subresources (#1884)

openyurtio · Dec 28, 2023 · 29bca00 · 29bca00
1 parent 817f679
commit 29bca00
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/charts/yurt-manager/templates/yurt-manager-auto-generated.yaml b/charts/yurt-manager/templates/yurt-manager-auto-generated.yaml
@@ -317,6 +317,16 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - nodes/status
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - ""
   resources:

diff --git a/pkg/yurtmanager/controller/nodelifecycle/node_lifecycle_controller.go b/pkg/yurtmanager/controller/nodelifecycle/node_lifecycle_controller.go
@@ -285,6 +285,8 @@ type ReconcileNodeLifeCycle struct {
 	podUpdateQueue  workqueue.RateLimitingInterface
 }
 
+// +kubebuilder:rbac:groups=core,resources=nodes/status,verbs=get;list;watch;update;patch
+
 // Add creates a new CsrApprover Controller and adds it to the Manager with default RBAC. The Manager will set fields on the Controller
 // and Start it when the Manager is Started.
 func Add(ctx context.Context, cfg *appconfig.CompletedConfig, mgr manager.Manager) error {