Merge branch 'main' into check_klm_roles

kyma-project · Jul 29, 2024 · 0d2b723 · 0d2b723
2 parents d0b9774 + 7d8c619
commit 0d2b723
Show file tree

Hide file tree

Showing 4 changed files with 31 additions and 3 deletions.
diff --git a/config/rbac/namespace_bindings/remote_namespace_role.yaml b/config/rbac/namespace_bindings/remote_namespace_role.yaml
@@ -20,6 +20,24 @@ rules:
     - watch
     - delete
     - get
+    - create
+    - patch
+    - update
+- apiGroups:
+    - operator.kyma-project.io
+  resources:
+    - kymas/finalizers
+  verbs:
+    - update
+- apiGroups:
+    - operator.kyma-project.io
+  resources:
+    - kymas/status
+  verbs:
+    - get
+    - patch
+    - update
+    - watch
 - apiGroups:
     - operator.kyma-project.io
   resources:

diff --git a/config/watcher/kustomization.yaml b/config/watcher/kustomization.yaml
@@ -18,7 +18,7 @@ patches:
         value: --skr-watcher-path=/skr-webhook
       - op: add
         path: /spec/template/spec/containers/0/args/-
-        value: --skr-watcher-image-tag=0.1.1
+        value: --skr-watcher-image-tag=1.1.1
       - op: add
         path: /spec/template/spec/containers/0/args/-
         value: --enable-domain-name-pinning=true

diff --git a/sec-scanners-config.yaml b/sec-scanners-config.yaml
@@ -1,7 +1,7 @@
 module-name: lifecycle-manager
 protecode:
   - europe-docker.pkg.dev/kyma-project/prod/lifecycle-manager:latest
-  - europe-docker.pkg.dev/kyma-project/prod/lifecycle-manager:1.1.0
+  - europe-docker.pkg.dev/kyma-project/prod/lifecycle-manager:1.1.1
 whitesource:
   language: golang-mod
   exclude:

diff --git a/tests/e2e/rbac_privileges_test.go b/tests/e2e/rbac_privileges_test.go
@@ -208,7 +208,17 @@ var _ = Describe("RBAC Privileges", func() {
 				{
 					APIGroups: []string{"operator.kyma-project.io"},
 					Resources: []string{"kymas"},
-					Verbs:     []string{"list", "watch", "delete", "create"},
+					Verbs:     []string{"list", "watch", "delete", "get", "create", "patch", "update"},
+				},
+				{
+					APIGroups: []string{"operator.kyma-project.io"},
+					Resources: []string{"kymas/finalizers"},
+					Verbs:     []string{"update"},
+				},
+				{
+					APIGroups: []string{"operator.kyma-project.io"},
+					Resources: []string{"kymas/status"},
+					Verbs:     []string{"get", "patch", "update", "watch"},
 				},
 				{
 					APIGroups: []string{"operator.kyma-project.io"},