ASTRACTL-34182:update cluster role so asup can get CRDs (#1725)

khicks720 · web-flow · commit 4aa241465f3c · 2024-09-19T14:41:05.000-06:00
* ASTRACTL-34182:update cluster role so asup can get CRDs

* ASTRACTL-34182:update role in yaml factory too for cli
diff --git a/cli/k8s_client/yaml_factory.go b/cli/k8s_client/yaml_factory.go
@@ -175,6 +175,9 @@ rules:
     verbs: ["use"]
     resourceNames:
       - {CLUSTER_ROLE_NAME}
+  - apiGroups: ["apiextensions.k8s.io"]
+    resources: ["customresourcedefinitions"]
+    verbs: ["get"]
 `
 
 func GetRoleYAML(namespace, roleName string, labels, controllingCRDetails map[string]string) string {
diff --git a/helm/trident-operator/templates/clusterrole.yaml b/helm/trident-operator/templates/clusterrole.yaml
@@ -408,3 +408,9 @@ rules:
       - use
     resourceNames:
       - tridentoperatorpods
+  - apiGroups:
+      - apiextensions.k8s.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - get

Original file line number	Diff line number	Diff line change
`@@ -175,6 +175,9 @@ rules:`
`175`	`175`	`verbs: ["use"]`
`176`	`176`	`resourceNames:`
`177`	`177`	`- {CLUSTER_ROLE_NAME}`
	`178`	`+ - apiGroups: ["apiextensions.k8s.io"]`
	`179`	`+ resources: ["customresourcedefinitions"]`
	`180`	`+ verbs: ["get"]`
`178`	`181`	`
`179`	`182`
`180`	`183`	`func GetRoleYAML(namespace, roleName string, labels, controllingCRDetails map[string]string) string {`