fix: add redis cluster role patch to be compatible with openshift

Signed-off-by: chlins <chenyuzh@vmware.com>
goharbor · Nov 2, 2021 · f19ac81 · f19ac81
1 parent 32b3914
commit f19ac81
Show file tree

Hide file tree

Showing 3 changed files with 56 additions and 0 deletions.
diff --git a/charts/harbor-operator/charts/redisoperator/templates/rbac.yaml b/charts/harbor-operator/charts/redisoperator/templates/rbac.yaml
@@ -36,6 +36,8 @@ rules:
       - endpoints
       - events
       - configmaps
+      - persistentvolumeclaims
+      - persistentvolumeclaims/finalizers
     verbs:
       - "*"
   - apiGroups:

diff --git a/manifests/cluster/kustomization.yaml b/manifests/cluster/kustomization.yaml
@@ -26,6 +26,7 @@ patchesStrategicMerge:
   - patch/delete-minio-console.yaml
   - patch/delete-duplicated-ns.yaml
   - patch/pg-configmap.yaml
+  - patch/redis-rbac.yaml
 
 patchesJson6902:
   - target:

diff --git a/manifests/cluster/patch/redis-rbac.yaml b/manifests/cluster/patch/redis-rbac.yaml
@@ -0,0 +1,53 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations:
+    goharbor.io/deploy-engine: Kustomization
+    goharbor.io/deploy-mode: cluster
+    goharbor.io/operator-version: v1.1.0
+  name: redisoperator
+rules:
+- apiGroups:
+  - databases.spotahome.com
+  resources:
+  - redisfailovers
+  - redisfailovers/finalizers
+  verbs:
+  - '*'
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - '*'
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - services
+  - endpoints
+  - events
+  - configmaps
+  - persistentvolumeclaims
+  - persistentvolumeclaims/finalizers
+  verbs:
+  - '*'
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  - statefulsets
+  verbs:
+  - '*'
+- apiGroups:
+  - policy
+  resources:
+  - poddisruptionbudgets
+  verbs:
+  - '*'