Merge pull request #146 from snapp-incubator/feat/sync-restart-access

feat: grant restart action to the sync project role (v0.5.3)

Author: 1995parham

config/manager/kustomization.yaml

@@ -6,4 +6,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: ghcr.io/snapp-incubator/argocd-complementary-operator
-  newTag: 0.5.2
+  newTag: 0.5.3

internal/controller/common_unit_test.go

@@ -374,6 +374,9 @@ func TestCreateAppProjStructure(t *testing.T) {
 		expectedPolicies := []string{
 			"p, proj:team-x:team-x-sync, applications, get, team-x/*, allow",
 			"p, proj:team-x:team-x-sync, applications, sync, team-x/*, allow",
+			"p, proj:team-x:team-x-sync, applications, action/apps/Deployment/restart, team-x/*, allow",
+			"p, proj:team-x:team-x-sync, applications, action/apps/StatefulSet/restart, team-x/*, allow",
+			"p, proj:team-x:team-x-sync, applications, action/apps/DaemonSet/restart, team-x/*, allow",
 			"p, proj:team-x:team-x-sync, repositories, get, team-x/*, allow",
 			"p, proj:team-x:team-x-sync, logs, get, team-x/*, allow",
 		}

internal/controller/controller_common.go

@@ -173,6 +173,9 @@ func createAppProj(team string) *argov1alpha1.AppProject {
 					Policies: []string{
 						"p, proj:" + team + ":" + team + "-sync, applications, get, " + team + "/*, allow",
 						"p, proj:" + team + ":" + team + "-sync, applications, sync, " + team + "/*, allow",
+						"p, proj:" + team + ":" + team + "-sync, applications, action/apps/Deployment/restart, " + team + "/*, allow",
+						"p, proj:" + team + ":" + team + "-sync, applications, action/apps/StatefulSet/restart, " + team + "/*, allow",
+						"p, proj:" + team + ":" + team + "-sync, applications, action/apps/DaemonSet/restart, " + team + "/*, allow",
 						"p, proj:" + team + ":" + team + "-sync, repositories, get, " + team + "/*, allow",
 						"p, proj:" + team + ":" + team + "-sync, logs, get, " + team + "/*, allow",
 					},