fix: added coreCusterRole in cleanupcontroller clusterrole

Signed-off-by: Ved Ratan <[email protected]>
nirmata · Jul 18, 2024 · 9cea81e · 9cea81e
1 parent 7095c7f
commit 9cea81e
Show file tree

Hide file tree

Showing 4 changed files with 15 additions and 4 deletions.
diff --git a/charts/kyverno/templates/background-controller/clusterrole.yaml b/charts/kyverno/templates/background-controller/clusterrole.yaml
@@ -74,10 +74,10 @@ rules:
       - update
       - patch
       - delete
-{{- with .Values.admissionController.rbac.coreClusterRole.extraResources }}
+{{- with .Values.backgroundController.rbac.coreClusterRole.extraResources }}
   {{- toYaml . | nindent 2 }}
 {{- end }}
-{{- with .Values.admissionController.rbac.clusterRole.extraResources }}
+{{- with .Values.backgroundController.rbac.clusterRole.extraResources }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

diff --git a/charts/kyverno/templates/cleanup-controller/clusterrole.yaml b/charts/kyverno/templates/cleanup-controller/clusterrole.yaml
@@ -79,6 +79,9 @@ rules:
       - subjectaccessreviews
     verbs:
       - create
+{{- with .Values.cleanupController.rbac.coreClusterRole.extraResources }}
+  {{- toYaml . | nindent 2 }}
+{{- end }}
 {{- with .Values.cleanupController.rbac.clusterRole.extraResources }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1

diff --git a/charts/kyverno/templates/reports-controller/clusterrole.yaml b/charts/kyverno/templates/reports-controller/clusterrole.yaml
@@ -58,10 +58,10 @@ rules:
     verbs:
       - create
       - patch
-{{- with .Values.admissionController.rbac.coreClusterRole.extraResources }}
+{{- with .Values.reportsController.rbac.coreClusterRole.extraResources }}
   {{- toYaml . | nindent 2 }}
 {{- end }}
-{{- with .Values.admissionController.rbac.clusterRole.extraResources }}
+{{- with .Values.reportsController.rbac.clusterRole.extraResources }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

diff --git a/config/install-latest-testing.yaml b/config/install-latest-testing.yaml
@@ -34247,6 +34247,14 @@ rules:
       - subjectaccessreviews
     verbs:
       - create
+  - apiGroups:
+    - '*'
+    resources:
+    - '*'
+    verbs:
+    - get
+    - list
+    - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole