fix(Deployment): Update RBACs

Signed-off-by: Anurag Rajawat <[email protected]>
5GSEC · Feb 13, 2024 · ed5bb39 · ed5bb39
1 parent b3192c3
commit ed5bb39
Show file tree

Hide file tree

Showing 5 changed files with 16 additions and 6 deletions.
diff --git a/deployments/nimbus-kubearmor/templates/role.yaml b/deployments/nimbus-kubearmor/templates/role.yaml
@@ -12,6 +12,14 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - intent.security.nimbus.com
+    resources:
+      - nimbuspolicies/status
+      - clusternimbuspolicies/status
+    verbs:
+      - get
+      - update
   - apiGroups:
       - security.kubearmor.com
     resources:

diff --git a/deployments/nimbus-netpol/templates/role.yaml b/deployments/nimbus-netpol/templates/role.yaml
@@ -12,6 +12,14 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - intent.security.nimbus.com
+    resources:
+      - nimbuspolicies/status
+      - clusternimbuspolicies/status
+    verbs:
+      - get
+      - update
   - apiGroups:
       - networking.k8s.io
     resources:

diff --git a/internal/controller/clustersecurityintentbinding_controller.go b/internal/controller/clustersecurityintentbinding_controller.go
@@ -28,8 +28,6 @@ type ClusterSecurityIntentBindingReconciler struct {
 	Scheme *runtime.Scheme
 }
 
-// TODO: Update RBAC
-
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=clustersecurityintentbindings,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=clustersecurityintentbindings/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=clusternimbuspolicies,verbs=get;list;watch;create;update;patch;delete

diff --git a/internal/controller/securityintent_controller.go b/internal/controller/securityintent_controller.go
@@ -25,8 +25,6 @@ type SecurityIntentReconciler struct {
 	Scheme *runtime.Scheme
 }
 
-// TODO: Update RBAC
-
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=securityintents,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=securityintents/status,verbs=get;update;patch
 

diff --git a/internal/controller/securityintentbinding_controller.go b/internal/controller/securityintentbinding_controller.go
@@ -29,8 +29,6 @@ type SecurityIntentBindingReconciler struct {
 	Scheme *runtime.Scheme
 }
 
-// TODO: Update RBAC
-
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=securityintentbindings,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=securityintentbindings/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=intent.security.nimbus.com,resources=nimbuspolicies,verbs=get;list;watch;create;update;patch;delete