Skip to content

Commit b6bdda4

Browse files
ryder777777shuchu
andauthored
fix: add watch verb on clusterroles and clusterrolebindings for feast-operator (#7062)
Signed-off-by: ryder777777 <[email protected]> Co-authored-by: Shuchu Han <[email protected]>
1 parent abca80c commit b6bdda4

4 files changed

Lines changed: 8 additions & 2 deletions

File tree

‎infra/feast-operator/bundle/manifests/feast-operator.clusterserviceversion.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -377,6 +377,7 @@ spec:
377377
- get
378378
- list
379379
- update
380+
- watch
380381
- apiGroups:
381382
- rbac.authorization.k8s.io
382383
resources:
@@ -385,6 +386,7 @@ spec:
385386
- create
386387
- get
387388
- list
389+
- watch
388390
- apiGroups:
389391
- rbac.authorization.k8s.io
390392
resourceNames:

‎infra/feast-operator/config/rbac/role.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -177,6 +177,7 @@ rules:
177177
- get
178178
- list
179179
- update
180+
- watch
180181
- apiGroups:
181182
- rbac.authorization.k8s.io
182183
resources:
@@ -185,6 +186,7 @@ rules:
185186
- create
186187
- get
187188
- list
189+
- watch
188190
- apiGroups:
189191
- rbac.authorization.k8s.io
190192
resourceNames:

‎infra/feast-operator/dist/install.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24426,6 +24426,7 @@ rules:
2442624426
- get
2442724427
- list
2442824428
- update
24429+
- watch
2442924430
- apiGroups:
2443024431
- rbac.authorization.k8s.io
2443124432
resources:
@@ -24434,6 +24435,7 @@ rules:
2443424435
- create
2443524436
- get
2443624437
- list
24438+
- watch
2443724439
- apiGroups:
2443824440
- rbac.authorization.k8s.io
2443924441
resourceNames:

‎infra/feast-operator/internal/controller/featurestore_controller.go‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -71,8 +71,8 @@ type FeatureStoreReconciler struct {
7171
// +kubebuilder:rbac:groups=core,resources=services;configmaps;persistentvolumeclaims,verbs=get;list;create;update;watch;delete;deletecollection
7272
// +kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;list;create;update;watch;delete
7373
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles;rolebindings,verbs=get;list;create;update;watch;delete
74-
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterrolebindings,verbs=get;list;create;update;delete
75-
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterroles,verbs=create;get;list
74+
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterrolebindings,verbs=get;list;watch;create;update;delete
75+
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterroles,verbs=create;get;list;watch
7676
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=clusterroles,resourceNames=feast-discover-namespaces;feast-oidc-token-review;feast-token-review-cluster-role,verbs=update;delete
7777
// +kubebuilder:rbac:groups=core,resources=secrets;namespaces,verbs=get;list;watch
7878
// +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch;create;delete;deletecollection

0 commit comments

Comments
 (0)