Skip to content

Commit b243714

Browse files
committed
OCPBUGS-35387: rbac: Add network resources to cluster-reader role
Add read permissions (i.e. get, list, watch) for network-related resources to the cluster-reader ClusterRole aggregation. The resources are: - egressrouters.network.operator.openshift.io - network-attachment-definitions.k8s.cni.cncf.io Fixes: OCPBUGS-35387 Signed-off-by: Matteo Dallaglio <mdallagl@redhat.com>
1 parent 41be31e commit b243714

1 file changed

Lines changed: 14 additions & 0 deletions

File tree

bindata/network/ovn-kubernetes/common/007-rbac-cluster-reader.yaml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,3 +37,17 @@ rules:
3737
- get
3838
- list
3939
- watch
40+
- apiGroups: ["network.operator.openshift.io"]
41+
resources:
42+
- egressrouters
43+
verbs:
44+
- get
45+
- list
46+
- watch
47+
- apiGroups: ["k8s.cni.cncf.io"]
48+
resources:
49+
- network-attachment-definitions
50+
verbs:
51+
- get
52+
- list
53+
- watch

0 commit comments

Comments
 (0)