diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 34d18cc..b5319fb 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -61,3 +61,10 @@ rules: - get - patch - update +- apiGroups: + - resource.k8s.io + resources: + - resourceclaims/driver + verbs: + - arbitrary-node:patch + - arbitrary-node:update diff --git a/internal/controller/resourcemonitor_controller.go b/internal/controller/resourcemonitor_controller.go index d13db65..9febf89 100644 --- a/internal/controller/resourcemonitor_controller.go +++ b/internal/controller/resourcemonitor_controller.go @@ -46,6 +46,7 @@ type ResourceMonitorReconciler struct { //+kubebuilder:rbac:groups=resource.k8s.io,resources=resourceclaims,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups=resource.k8s.io,resources=resourceclaims/status,verbs=get;update;patch +//+kubebuilder:rbac:groups=resource.k8s.io,resources=resourceclaims/driver,verbs=arbitrary-node:update;arbitrary-node:patch //+kubebuilder:rbac:groups=resource.k8s.io,resources=resourceslices,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups=resource.k8s.io,resources=resourceslices/status,verbs=get;update;patch