#2003 Re-add missing roles

J12934 · J12934 · commit 3e2fb6c67e4e · 2024-02-23T10:26:13.000+01:00
Update permission was missing in the go code from which these are generated

Signed-off-by: Jannik Hollenbach &lt;jannik.hollenbach@iteratec.com&gt;
diff --git a/operator/config/rbac/role.yaml b/operator/config/rbac/role.yaml
@@ -132,4 +132,5 @@ rules:
   - create
   - get
   - list
+  - update
   - watch
diff --git a/operator/controllers/execution/scans/scan_controller.go b/operator/controllers/execution/scans/scan_controller.go
@@ -54,7 +54,7 @@ var s3StorageFinalizer = "s3.storage.securecodebox.io"
 // Pod permission are required to grant these permission to service accounts
 // +kubebuilder:rbac:groups=core,resources=pods,verbs=get
 // +kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;watch;list;create
-// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles,verbs=get;watch;list;create
+// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles,verbs=get;watch;list;create;update
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;watch;list;create
 
 // Reconcile compares the scan object against the state of the cluster and updates both if needed
diff --git a/operator/templates/rbac/role.yaml b/operator/templates/rbac/role.yaml
@@ -132,4 +132,5 @@ rules:
   - create
   - get
   - list
+  - update
   - watch
diff --git a/operator/tests/__snapshot__/operator_test.yaml.snap b/operator/tests/__snapshot__/operator_test.yaml.snap
@@ -463,6 +463,7 @@ matches the snapshot:
           - create
           - get
           - list
+          - update
           - watch
   15: |
     apiVersion: rbac.authorization.k8s.io/v1

-Original file line number
+Diff line change
   - create
   - get
   - list
 +  - update
   - watch