Merge pull request #549 from Shunpoco/modify-manager-rbac

Add nodes and node.k8s.io/runtimeclasses permission for manager

Author: vdice

config/rbac/role.yaml

@@ -4,6 +4,14 @@ kind: ClusterRole
 metadata:
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  verbs:
+  - list
+  - update
+  - watch
 - apiGroups:
   - batch
   resources:
@@ -30,6 +38,16 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - node.k8s.io
+  resources:
+  - runtimeclasses
+  verbs:
+  - create
+  - get
+  - list
+  - patch
+  - watch
 - apiGroups:
   - runtime.spinkube.dev
   resources:

internal/controller/shim_controller.go

@@ -70,6 +70,8 @@ type opConfig struct {
 //+kubebuilder:rbac:groups=runtime.spinkube.dev,resources=shims,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=runtime.spinkube.dev,resources=shims/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=runtime.spinkube.dev,resources=shims/finalizers,verbs=update
+//+kubebuilder:rbac:groups="",resources=nodes,verbs=list;watch;update
+//+kubebuilder:rbac:groups=node.k8s.io,resources=runtimeclasses,verbs=get;list;watch;create;patch
 
 // SetupWithManager sets up the controller with the Manager.
 func (sr *ShimReconciler) SetupWithManager(mgr ctrl.Manager) error {