Regenerate bundle and templates for consistency

Technically, this does not change the set of RBAC for the controller, since the workspace SA RBAC is a subset of the controller RBAC (specific secret vs all secrets). Signed-off-by: Angel Misevski <amisevsk@redhat.com>
amisevsk · Aug 12, 2021 · 056baaa · 056baaa
1 parent f1c23dc
commit 056baaa
Show file tree

Hide file tree

Showing 6 changed files with 60 additions and 0 deletions.
diff --git a/deploy/bundle/manifests/devworkspace-operator.clusterserviceversion.yaml b/deploy/bundle/manifests/devworkspace-operator.clusterserviceversion.yaml
diff --git a/deploy/deployment/kubernetes/combined.yaml b/deploy/deployment/kubernetes/combined.yaml
diff --git a/deploy/deployment/kubernetes/objects/devworkspace-controller-role.ClusterRole.yaml b/deploy/deployment/kubernetes/objects/devworkspace-controller-role.ClusterRole.yaml
diff --git a/deploy/deployment/openshift/combined.yaml b/deploy/deployment/openshift/combined.yaml
diff --git a/deploy/deployment/openshift/objects/devworkspace-controller-role.ClusterRole.yaml b/deploy/deployment/openshift/objects/devworkspace-controller-role.ClusterRole.yaml
diff --git a/deploy/templates/components/rbac/role.yaml b/deploy/templates/components/rbac/role.yaml
@@ -31,6 +31,16 @@ rules:
   - pods/exec
   verbs:
   - create
+- apiGroups:
+  - ""
+  resourceNames:
+  - workspace-credentials-secret
+  resources:
+  - secrets
+  verbs:
+  - create
+  - delete
+  - get
 - apiGroups:
   - ""
   resources: