From eb20ed052d85557c33ca18c5806b9de63824dc94 Mon Sep 17 00:00:00 2001 From: Daniel Vega-Myhre Date: Thu, 24 Aug 2023 18:39:29 +0000 Subject: [PATCH] add update/patch rbac verbs for resource jobs/status --- config/components/rbac/role.yaml | 2 ++ pkg/controllers/jobset_controller.go | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/config/components/rbac/role.yaml b/config/components/rbac/role.yaml index 53b431583..7444f9bb4 100644 --- a/config/components/rbac/role.yaml +++ b/config/components/rbac/role.yaml @@ -58,6 +58,8 @@ rules: - jobs/status verbs: - get + - patch + - update - apiGroups: - "" resources: diff --git a/pkg/controllers/jobset_controller.go b/pkg/controllers/jobset_controller.go index cce21b48e..1b355c2ff 100644 --- a/pkg/controllers/jobset_controller.go +++ b/pkg/controllers/jobset_controller.go @@ -76,7 +76,7 @@ func NewJobSetReconciler(client client.Client, scheme *runtime.Scheme, record re //+kubebuilder:rbac:groups=jobset.x-k8s.io,resources=jobsets/status,verbs=get;update;patch //+kubebuilder:rbac:groups=jobset.x-k8s.io,resources=jobsets/finalizers,verbs=update //+kubebuilder:rbac:groups=batch,resources=jobs,verbs=get;list;watch;create;update;patch;delete -//+kubebuilder:rbac:groups=batch,resources=jobs/status,verbs=get +//+kubebuilder:rbac:groups=batch,resources=jobs/status,verbs=get;update;patch //+kubebuilder:rbac:groups=core,resources=services,verbs=get;list;watch;create;update;patch;delete // Reconcile is part of the main kubernetes reconciliation loop which aims to