Compare commits

...
3 Commits
Author SHA1 Message Date
Automated ReleaseandSubmariner Bot 46e3c825dd Update Submariner dependencies to v0.16.6
Signed-off-by: Automated Release <release@submariner.io>
2024-05-31 17:22:16 +03:00
Automated ReleaseandSubmariner Bot 73c7b18c8a Update Submariner dependencies to v0.16.5
Signed-off-by: Automated Release <release@submariner.io>
2024-05-23 12:39:11 +03:00
Tom PantelisandStephen Kitt 9339e9ddfa Add RBAC access to finalizers for the operator role
On Openshift, the operator failed with error

"\"submariner-gateway\" is forbidden: cannot set blockOwnerDeletion
if an ownerReference refers to a resource you can't set finalizers on"

Openshift enables OwnerReferencesPermissionEnforcement, so
in order to set blockOwnerDeletion for an object, the user needs
update permission for the finalizers subresource of the referenced
owner. In this case the owner is the Submariner object.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2024-05-21 18:55:53 +02:00
2 changed files with 8 additions and 1 deletions
+1 -1
View File
@@ -17,7 +17,7 @@ endif
export DEPLOYTOOL = helm export DEPLOYTOOL = helm
GH_URL=https://submariner-io.github.io/submariner-charts/charts GH_URL=https://submariner-io.github.io/submariner-charts/charts
CHARTS_DIR=charts CHARTS_DIR=charts
CHARTS_VERSION=0.16.4 CHARTS_VERSION=0.16.6
HELM_DOCS_VERSION=0.15.0 HELM_DOCS_VERSION=0.15.0
REPO_URL=$(shell git config remote.origin.url) REPO_URL=$(shell git config remote.origin.url)
+7
View File
@@ -90,6 +90,13 @@ rules:
- get - get
- list - list
- watch - watch
- apiGroups:
- submariner.io
resources:
- submariners/finalizers
- servicediscoveries/finalizers
verbs:
- update
--- ---
kind: RoleBinding kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1