From 39b0b336d85df0b3fad36760fb910141091c42b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=82=9F=E7=A9=BA?= <rainchan365@163.com>
Date: Wed, 25 Jun 2025 15:25:20 +0800
Subject: [PATCH] fix: add RBAC permissions for ReferenceGrant resource

---
 config/rbac/role.yaml           | 9 +++++++++
 internal/manager/controllers.go | 2 ++
 2 files changed, 11 insertions(+)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 516b74bec..c9dc78391 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -91,6 +91,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - httproutes/status
+  - referencegrants/status
   verbs:
   - get
   - update
@@ -102,6 +103,14 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - referencegrants
+  verbs:
+  - list
+  - update
+  - watch
 - apiGroups:
   - networking.k8s.io
   resources:
diff --git a/internal/manager/controllers.go b/internal/manager/controllers.go
index f651d957f..5ece9d66d 100644
--- a/internal/manager/controllers.go
+++ b/internal/manager/controllers.go
@@ -66,6 +66,8 @@ import (
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=gateways/status,verbs=get;update
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes,verbs=get;list;watch
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes/status,verbs=get;update
+// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants,verbs=list;watch;update
+// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants/status,verbs=get;update
 
 // Networking
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;update