From 42ced8692ff96ba1000bef8bddae467327d48c97 Mon Sep 17 00:00:00 2001 From: Julien DELACROIX Date: Tue, 20 Feb 2024 15:41:59 +0100 Subject: [PATCH] Add missing resource in CRD cluster roles --- pkg/bootstrap/crds.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/pkg/bootstrap/crds.go b/pkg/bootstrap/crds.go index 4072423c72..66ce2cd7fa 100644 --- a/pkg/bootstrap/crds.go +++ b/pkg/bootstrap/crds.go @@ -135,6 +135,12 @@ func installCRDRole(ctx context.Context, cl client.Client) error { }, }, } + + if role.role == "view" { + crdRole.Rules[0].APIGroups = append(crdRole.Rules[0].APIGroups, "federation.maistra.io", "telemetry.istio.io") + crdRole.Rules[1].Resources = append(crdRole.Rules[1].Resources, "servicemeshcontrolplanes", "servicemeshmembers", "servicemeshmemberrolls") + } + existingRole := crdRole.DeepCopy() if err := cl.Get(ctx, client.ObjectKey{Name: crdRole.Name}, existingRole); err == nil { if !reflect.DeepEqual(existingRole.Rules, crdRole.Rules) {