store

Signed-off-by: Ye Cao <[email protected]>
dashanji · Dec 24, 2023 · d532604 · d532604
1 parent 0d98a40
commit d532604
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/k8s/config/rbac/role.yaml b/k8s/config/rbac/role.yaml
@@ -93,6 +93,21 @@ rules:
  - get
  - list
  - update
+- apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+- apiGroups:
+ - ""
+ resourceNames:
+ - vineyard-webhook-certs
+ resources:
+ - secrets
+ verbs:
+ - get
+ - update
 - apiGroups:
  - ""
  resources:

diff --git a/k8s/controllers/k8s/backup_controller.go b/k8s/controllers/k8s/backup_controller.go
@@ -76,6 +76,8 @@ type BackupReconciler struct {
 // +kubebuilder:rbac:groups=batch,resources=jobs/status,verbs=get;create;update;delete
 // +kubebuilder:rbac:groups="",resources=persistentvolumes,verbs=get;list;create;update;patch;delete
 // +kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=get;list;create;update;patch;delete
+// +kubebuilder:rbac:groups="",resources=secrets,verbs=get;update, resourceNames=vineyard-webhook-certs
+// +kubebuilder:rbac:groups="",resources=secrets,verbs=create
 
 // Reconcile reconciles the Backup.
 func (r *BackupReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {