Merge pull request #21 from cybozu-go/add-role-to-view-all-resources

Add role to view all resources for propagate resource

charts/accurate/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.0
+version: 0.1.1
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/accurate/templates/generated/generated.yaml

@@ -74,6 +74,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - '*'
+  resources:
+  - '*'
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - accurate.cybozu.com
   resources:

config/rbac/role.yaml

@@ -18,6 +18,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - '*'
+  resources:
+  - '*'
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - accurate.cybozu.com
   resources:

controllers/propagate.go

@@ -49,6 +49,8 @@ func cloneResource(res *unstructured.Unstructured, ns string) *unstructured.Unst
 	return c
 }
 
+//+kubebuilder:rbac:groups=*,resources=*,verbs=get;list;watch
+
 // PropagateController propagates objects of a namespace-scoped resource.
 type PropagateController struct {
 	client.Client