Add required apiexports rbac permissions

ncdc · ncdc · commit 6efa2936f389 · 2022-08-11T09:30:18.000-04:00
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -91,12 +91,6 @@ rules:
   - get
   - list
   - watch
-- apiGroups:
-  - apis.kcp.dev
-  resources:
-  - apiexports/status
-  verbs:
-  - get
 - apiGroups:
   - data.my.domain
   resources:
diff --git a/main.go b/main.go
@@ -158,6 +158,8 @@ func main() {
 	}
 }
 
+// +kubebuilder:rbac:groups="apis.kcp.dev",resources=apiexports,verbs=get;list;watch
+
 // restConfigForAPIExport returns a *rest.Config properly configured to communicate with the endpoint for the
 // APIExport's virtual workspace.
 func restConfigForAPIExport(ctx context.Context, cfg *rest.Config, apiExportName string) (*rest.Config, error) {

Original file line number	Diff line number	Diff line change
`@@ -158,6 +158,8 @@ func main() {`
`158`	`158`	`}`
`159`	`159`	`}`
`160`	`160`
	`161`	`+// +kubebuilder:rbac:groups="apis.kcp.dev",resources=apiexports,verbs=get;list;watch`
	`162`	`+`
`161`	`163`	`// restConfigForAPIExport returns a *rest.Config properly configured to communicate with the endpoint for the`
`162`	`164`	`// APIExport's virtual workspace.`
`163`	`165`	`func restConfigForAPIExport(ctx context.Context, cfg rest.Config, apiExportName string) (rest.Config, error) {`