Fix RBAC creation

movetokube · Nov 22, 2023 · 6edd663 · 6edd663
1 parent 1d026f2
commit 6edd663
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 8 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -4,6 +4,14 @@ kind: ClusterRole
 metadata:
   name: manager-role
 rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - create
+  - get
+  - update
 - apiGroups:
   - db.movetokube.com
   resources:
@@ -56,11 +64,3 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-  - get
-  - update
diff --git a/internal/controller/postgres_controller.go b/internal/controller/postgres_controller.go
@@ -65,6 +65,7 @@ func (r *PostgresReconciler) GetPrefixedDbName(dbname string) string {
 //+kubebuilder:rbac:groups=db.movetokube.com,resources=postgres,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=db.movetokube.com,resources=postgres/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=db.movetokube.com,resources=postgres/finalizers,verbs=update
+//+kubebuilder:rbac:groups=coordination.k8s.io,resources=leases,verbs=create;get;update
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.