Adding missing permissions to add ownerref on apikeyapproval

eguzki · eguzki · commit e86d5205304d · 2026-05-21T16:49:19.000+02:00
Signed-off-by: Eguzki Astiz Lezaun &lt;eastizle@redhat.com&gt;
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -18,8 +18,11 @@ rules:
   - devportal.kuadrant.io
   resources:
   - apikeyapprovals
+  - apikeyrequests
+  - apiproducts
   verbs:
   - create
+  - delete
   - get
   - list
   - patch
@@ -36,19 +39,6 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - devportal.kuadrant.io
-  resources:
-  - apikeyrequests
-  - apiproducts
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - devportal.kuadrant.io
   resources:
diff --git a/internal/controller/apikeyapproval_controller.go b/internal/controller/apikeyapproval_controller.go
@@ -38,7 +38,7 @@ type APIKeyApprovalReconciler struct {
 	Scheme *runtime.Scheme
 }
 
-// +kubebuilder:rbac:groups=devportal.kuadrant.io,resources=apikeyapprovals,verbs=get;list;watch;update;patch
+// +kubebuilder:rbac:groups=devportal.kuadrant.io,resources=apikeyapprovals,verbs=get;list;watch;update;patch;delete
 // +kubebuilder:rbac:groups=devportal.kuadrant.io,resources=apikeyrequests,verbs=get;list;watch
 
 // Reconcile handles reconciling all APIKeyApprovals in a single call. Any resource event should enqueue the
diff --git a/test/e2e/apikey_approval_gc_test.go b/test/e2e/apikey_approval_gc_test.go

Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,7 @@ type APIKeyApprovalReconciler struct {`
`38`	`38`	`Scheme *runtime.Scheme`
`39`	`39`	`}`
`40`	`40`
`41`		`-// +kubebuilder:rbac:groups=devportal.kuadrant.io,resources=apikeyapprovals,verbs=get;list;watch;update;patch`
	`41`	`+// +kubebuilder:rbac:groups=devportal.kuadrant.io,resources=apikeyapprovals,verbs=get;list;watch;update;patch;delete`
`42`	`42`	`// +kubebuilder:rbac:groups=devportal.kuadrant.io,resources=apikeyrequests,verbs=get;list;watch`
`43`	`43`
`44`	`44`	`// Reconcile handles reconciling all APIKeyApprovals in a single call. Any resource event should enqueue the`