From 1d002f7b1eff339401e06b7ccd5a55a27ea37149 Mon Sep 17 00:00:00 2001 From: Bruno Salzano Date: Fri, 15 Aug 2025 15:14:29 +0200 Subject: [PATCH] feat: extend nuvolaris-swku-role for adminapi extend nuvolaris-swku-role for adminapi, adding permissions on configmaps and jobs --- deploy/nuvolaris-permissions/nuvolaris-wsku-roles.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/deploy/nuvolaris-permissions/nuvolaris-wsku-roles.yaml b/deploy/nuvolaris-permissions/nuvolaris-wsku-roles.yaml index ac0df602..101cff05 100644 --- a/deploy/nuvolaris-permissions/nuvolaris-wsku-roles.yaml +++ b/deploy/nuvolaris-permissions/nuvolaris-wsku-roles.yaml @@ -29,6 +29,14 @@ rules: - apiGroups: ["nuvolaris.org"] resources: ["whisksusers","whisksusers/status","*/finalizers"] verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] +# assign the possibility to operate on configmaps (admin api) +- apiGroups: [""] + resources: ["configmaps"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] +# assign the possibility to operate on jobs (admin api) +- apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] --- kind: RoleBinding