Skip to content

Commit 7aa283b

Browse files
Akrogclaude
andcommitted
Add clusterversions RBAC rule for lightspeed-stack
lightspeed-stack needs to read the cluster version (via the config.openshift.io API) when an admin user interacts with it. Grant list and get on clusterversions to the SAR ClusterRole. Jira: OSPRH-29574 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 8cf6744 commit 7aa283b

2 files changed

Lines changed: 2 additions & 1 deletion

File tree

internal/controller/lcore_reconciler.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ func reconcileSARRole(h *common_helper.Helper, ctx context.Context, instance *ap
120120
{
121121
APIGroups: []string{"config.openshift.io"},
122122
Resources: []string{"clusterversions"},
123-
Verbs: []string{"get"},
123+
Verbs: []string{"list", "get"},
124124
},
125125
{
126126
APIGroups: []string{""},

test/kuttl/common/openstack-lightspeed-instance/assert-openstack-lightspeed-instance.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,7 @@ rules:
7373
resources:
7474
- clusterversions
7575
verbs:
76+
- list
7677
- get
7778
- apiGroups:
7879
- ""

0 commit comments

Comments
 (0)