Add missing resource in CRD cluster roles

maistra · Feb 28, 2024 · a4b81eb · a4b81eb
1 parent 904c7d6
commit a4b81eb
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/pkg/bootstrap/crds.go b/pkg/bootstrap/crds.go
@@ -135,6 +135,16 @@ func installCRDRole(ctx context.Context, cl client.Client) error {
  },
  },
  }
+
+ if role.role == "view" {
+ crdRole.Rules[0].APIGroups = append(crdRole.Rules[0].APIGroups, "federation.maistra.io")
+ crdRole.Rules[0].APIGroups = append(crdRole.Rules[0].APIGroups, "telemetry.istio.io")
+
+ crdRole.Rules[1].Resources = append(crdRole.Rules[1].Resources, "servicemeshcontrolplanes")
+ crdRole.Rules[1].Resources = append(crdRole.Rules[1].Resources, "servicemeshmembers")
+ crdRole.Rules[1].Resources = append(crdRole.Rules[1].Resources, "servicemeshmemberrolls")
+ }
+
  existingRole := crdRole.DeepCopy()
  if err := cl.Get(ctx, client.ObjectKey{Name: crdRole.Name}, existingRole); err == nil {
  if !reflect.DeepEqual(existingRole.Rules, crdRole.Rules) {