Fix roles / missing privileges

chart/Chart.yaml

@@ -10,9 +10,9 @@ description: |
 
 type: application
 
-version: 0.1.7
+version: 0.1.11
 
-appVersion: "0.1.7"
+appVersion: "0.1.11"
 
 home: https://github.com/lukaszraczylo/kubernetes-images-sync-operator
 

chart/templates/mr-raczylo-com-rbac.yaml

@@ -5,6 +5,18 @@ metadata:
   labels:
   {{- include "chart.labels" . | nindent 4 }}
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - apps
   resources:
@@ -37,8 +49,7 @@ rules:
 - apiGroups:
   - raczylo.com
   resources:
-  - clusterimageexports
-  - clusterimages
+  - '*'
   verbs:
   - create
   - delete
@@ -50,13 +61,13 @@ rules:
 - apiGroups:
   - raczylo.com
   resources:
-  - clusterimageexports/finalizers
+  - '*/finalizers'
   verbs:
   - update
 - apiGroups:
   - raczylo.com
   resources:
-  - clusterimageexports/status
+  - '*/status'
   verbs:
   - get
   - patch

chart/templates/raczylo.com-clusterimage-editor-rbac.yaml

@@ -22,4 +22,7 @@ rules:
   resources:
   - clusterimages/status
   verbs:
-  - get
+  - get
+  - patch
+  - update
+  - watch

chart/templates/raczylo.com-clusterimage-viewer-rbac.yaml

@@ -18,4 +18,5 @@ rules:
   resources:
   - clusterimages/status
   verbs:
-  - get
+  - get
+  - watch

chart/templates/raczylo.com-clusterimageexport-editor-rbac.yaml

@@ -22,4 +22,7 @@ rules:
   resources:
   - clusterimageexports/status
   verbs:
-  - get
+  - get
+  - patch
+  - update
+  - watch

chart/templates/raczylo.com-clusterimageexport-viewer-rbac.yaml

@@ -9,13 +9,8 @@ rules:
   - raczylo.com
   resources:
   - clusterimageexports
+  - clusterimageexports/status
   verbs:
   - get
   - list
-  - watch
-- apiGroups:
-  - raczylo.com
-  resources:
-  - clusterimageexports/status
-  verbs:
-  - get
+  - watch

chart/values.yaml

@@ -11,7 +11,7 @@ cmRaczyloCom:
         - ALL
     image:
       repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-operator
-      tag: 0.1.7
+      tag: 0.1.11
     resources:
       limits:
         cpu: 500m