Add delete permissions to operator

...for ServiceAccount, ClusterRole, ClusterRoleBinding for network plugin syncer cleanup. Signed-off-by: Tom Pantelis <[email protected]>
submariner-io · Aug 23, 2023 · 19cce1f · 19cce1f
1 parent 60159d2
commit 19cce1f
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 0 deletions.
diff --git a/config/rbac/submariner-operator/role.yaml b/config/rbac/submariner-operator/role.yaml
@@ -18,6 +18,19 @@ rules:
       - secrets
     verbs:
       - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - serviceaccounts
+    verbs:
+      - delete
+  - apiGroups:
+      - rbac.authorization.k8s.io
+    resources:
+      - clusterroles
+      - clusterrolebindings
+    verbs:
+      - delete
   - apiGroups:
       - apps
     resources:

diff --git a/pkg/embeddedyamls/yamls.go b/pkg/embeddedyamls/yamls.go
@@ -2513,6 +2513,19 @@ rules:
       - secrets
     verbs:
       - '*'
+  - apiGroups:
+      - ""
+    resources:
+      - serviceaccounts
+    verbs:
+      - delete
+  - apiGroups:
+      - rbac.authorization.k8s.io
+    resources:
+      - clusterroles
+      - clusterrolebindings
+    verbs:
+      - delete
   - apiGroups:
       - apps
     resources: