Skip to content

Commit e8f6663

Browse files
committed
rbac: Add network resources to cluster-reader role
Add read permissions (i.e. get, list, watch) for network-related resources to the cluster-reader ClusterRole aggregation. The resources are: - egressrouters.network.operator.openshift.io - network-attachment-definitions.k8s.cni.cncf.io - networks.operator.openshift.io Fixes: OCPBUGS-35387
1 parent c563eb4 commit e8f6663

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed

bindata/network/ovn-kubernetes/common/007-rbac-cluster-reader.yaml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,3 +37,24 @@ rules:
3737
- get
3838
- list
3939
- watch
40+
- apiGroups: ["network.operator.openshift.io"]
41+
resources:
42+
- egressrouters
43+
verbs:
44+
- get
45+
- list
46+
- watch
47+
- apiGroups: ["operator.openshift.io"]
48+
resources:
49+
- networks
50+
verbs:
51+
- get
52+
- list
53+
- watch
54+
- apiGroups: ["k8s.cni.cncf.io"]
55+
resources:
56+
- network-attachment-definitions
57+
verbs:
58+
- get
59+
- list
60+
- watch

0 commit comments

Comments
 (0)