Add InternalHubComponent rbac to the policy-addon

Refs: - https://issues.redhat.com/browse/ACM-14707 Signed-off-by: Justin Kulikauskas <[email protected]>
stolostron · Jan 24, 2025 · 88c02f9 · 88c02f9
1 parent b382401
commit 88c02f9
Show file tree

Hide file tree

Showing 3 changed files with 28 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -1617,7 +1617,14 @@ rules:
   - get
   - list
   - patch
+  - update
   - watch
+- apiGroups:
+  - operator.open-cluster-management.io
+  resources:
+  - internalhubcomponents/finalizers
+  verbs:
+  - update
 - apiGroups:
   - operator.open-cluster-management.io
   resources:

diff --git a/pkg/templates/charts/toggle/grc/templates/grc-policy-addon-clusterrole.yaml b/pkg/templates/charts/toggle/grc/templates/grc-policy-addon-clusterrole.yaml
@@ -189,6 +189,25 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - operator.open-cluster-management.io
+  resourceNames:
+  - grc
+  resources:
+  - internalhubcomponents
+  verbs:
+  - get
+  - list
+  - update
+  - watch
+- apiGroups:
+  - operator.open-cluster-management.io
+  resourceNames:
+  - grc
+  resources:
+  - internalhubcomponents/finalizers
+  verbs:
+  - update
 - apiGroups:
   - policy.open-cluster-management.io
   resources:

diff --git a/pkg/templates/rbac_gen.go b/pkg/templates/rbac_gen.go