Add watch and list to secret rbac (#862)

Signed-off-by: Vince Prignano <[email protected]>
kubernetes-sigs · Jul 1, 2019 · 86012e5 · 86012e5
1 parent 311c67b
commit 86012e5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/config/rbac/rbac_role.yaml b/config/rbac/rbac_role.yaml
@@ -37,6 +37,8 @@ rules:
   verbs:
   - create
   - get
+  - watch
+  - list
 - apiGroups:
   - awsprovider.k8s.io
   resources:

diff --git a/pkg/cloud/aws/actuators/cluster/actuator.go b/pkg/cloud/aws/actuators/cluster/actuator.go
@@ -37,7 +37,7 @@ import (
 
 //+kubebuilder:rbac:groups=awsprovider.k8s.io,resources=awsclusterproviderconfigs;awsclusterproviderstatuses,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=cluster.k8s.io,resources=clusters;clusters/status,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=,resources=secrets,verbs=create;get
+//+kubebuilder:rbac:groups=,resources=secrets,verbs=create;get;watch;list
 
 // Actuator is responsible for performing cluster reconciliation
 type Actuator struct {
-Original file line number
+Diff line change
@@ Expand Up / @@ -37,6 +37,8 @@ rules: @@
       verbs:
       - create
       - get
+      - watch
+      - list
     - apiGroups:
       - awsprovider.k8s.io
       resources:
@@ Expand Down @@