update labeling permissions and script (#2245)

Signed-off-by: Ben Luzarraga <[email protected]>
IBM · Oct 8, 2024 · 1a699d3 · 1a699d3
1 parent 620aad0
commit 1a699d3
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/velero/backup/common-service/label-bedrock-role.yaml b/velero/backup/common-service/label-bedrock-role.yaml
@@ -16,7 +16,8 @@ rules:
       - policy
       - zen.cpd.ibm.com
       - operators.coreos.com
-      - operator.ibm.com 
+      - operator.ibm.com
+      - rbac.authorization.k8s.io 
     resources:
       - namespaces
       - zenservices
@@ -28,8 +29,8 @@ rules:
       - secrets
       - commonservices
       - namespacescopes
-      - role
-      - rolebinding
+      - roles
+      - rolebindings
       - serviceaccount
       #not necessary for cpd
       #- ibmlicenseservicereporters.operator.ibm.com
diff --git a/velero/backup/common-service/label-common-service.sh b/velero/backup/common-service/label-common-service.sh
@@ -372,7 +372,7 @@ function label_nss(){
     ${OC} label role nss-managed-role-from-$OPERATOR_NS foundationservices.cloudpak.ibm.com=nss -n $SERVICES_NS --overwrite=true 2>/dev/null
     ${OC} label rolebinding nss-managed-role-from-$OPERATOR_NS foundationservices.cloudpak.ibm.com=nss -n $OPERATOR_NS --overwrite=true 2>/dev/null
     ${OC} label rolebinding nss-managed-role-from-$OPERATOR_NS foundationservices.cloudpak.ibm.com=nss -n $SERVICES_NS --overwrite=true 2>/dev/null
-    ${OC} label configmap namespace-scope foundationservices.cloudpak.ibm.com=nss -n $SERVICES_NS --overwrite=true 2>/dev/null
+    ${OC} label configmap namespace-scope foundationservices.cloudpak.ibm.com=nss -n $OPERATOR_NS --overwrite=true 2>/dev/null
     if [[ $TETHERED_NS != "" ]]; then
         for namespace in ${TETHERED_NS//,/ }
         do