From 14129f0ea631847a40ee71cd99c2dafabbc3a378 Mon Sep 17 00:00:00 2001
From: Jacques Lemaitre <58292368+JackLemaitre@users.noreply.github.com>
Date: Thu, 6 Jun 2024 08:54:32 +0200
Subject: [PATCH]  modif right for S3User (#70)

* modif right for S3User

* bump 5.2

---------

Co-authored-by: Lemaitre Jacques <R9OH5F@ad.insee.intra>
---
 charts/s3-operator/Chart.yaml                 |  2 +-
 .../s3-operator/templates/manager-rbac.yaml   | 30 +++++++++++++++++++
 2 files changed, 31 insertions(+), 1 deletion(-)

diff --git a/charts/s3-operator/Chart.yaml b/charts/s3-operator/Chart.yaml
index c871df6..b2d4f0c 100644
--- a/charts/s3-operator/Chart.yaml
+++ b/charts/s3-operator/Chart.yaml
@@ -13,7 +13,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.5.1
+version: 0.5.2
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
diff --git a/charts/s3-operator/templates/manager-rbac.yaml b/charts/s3-operator/templates/manager-rbac.yaml
index fea69ac..a2d2290 100644
--- a/charts/s3-operator/templates/manager-rbac.yaml
+++ b/charts/s3-operator/templates/manager-rbac.yaml
@@ -83,6 +83,36 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - s3.onyxia.sh
+  resources:
+  - s3user
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - s3.onyxia.sh
+  resources:
+  - s3user/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - s3.onyxia.sh
+  resources:
+  - s3user/status
+  verbs:
+  - get
+  - patch
+  - update  
+- apiGroups: [""]
+  resources: [ "secrets" ]
+  verbs: ["create" , "patch" , "update" ,"delete"]
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding