Empty-Commit

kyma-project · Jul 29, 2024 · d0b9774 · d0b9774
1 parent 7cc9c9e
commit d0b9774
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 6 deletions.
diff --git a/config/rbac/namespace_bindings/istio_namespace_role.yaml b/config/rbac/namespace_bindings/istio_namespace_role.yaml
@@ -11,11 +11,23 @@ rules:
   verbs:
     - list
     - watch
+    - create
+    - delete
 - apiGroups:
     - cert-manager.io
   resources:
     - certificates
   verbs:
     - patch
     - list
-    - watch
+    - watch
+    - get
+    - create
+    - delete
+- apiGroups:
+    - cert-manager.io
+  resources:
+    - issuers
+  verbs:
+    - list
+    - watch
diff --git a/config/rbac/namespace_bindings/remote_namespace_role.yaml b/config/rbac/namespace_bindings/remote_namespace_role.yaml
@@ -18,10 +18,13 @@ rules:
   verbs:
     - list
     - watch
+    - delete
+    - get
 - apiGroups:
     - operator.kyma-project.io
   resources:
     - moduletemplates
   verbs:
     - list
-    - watch
+    - watch
+    - delete
diff --git a/tests/e2e/rbac_privileges_test.go b/tests/e2e/rbac_privileges_test.go
@@ -177,12 +177,17 @@ var _ = Describe("RBAC Privileges", func() {
 				{
 					APIGroups: []string{""},
 					Resources: []string{"secrets"},
-					Verbs:     []string{"list", "watch"},
+					Verbs:     []string{"list", "watch", "create", "delete"},
 				},
 				{
 					APIGroups: []string{"cert-manager.io"},
 					Resources: []string{"certificates"},
-					Verbs:     []string{"patch", "list", "watch"},
+					Verbs:     []string{"patch", "list", "watch", "get", "create", "delete"},
+				},
+				{
+					APIGroups: []string{"cert-manager.io"},
+					Resources: []string{"issuers"},
+					Verbs:     []string{"list", "watch"},
 				},
 			}
 			istioSystemKlmRoleBindings, err := ListKlmRoleBindings(controlPlaneClient, ctx, "klm-controller-manager",
@@ -203,12 +208,12 @@ var _ = Describe("RBAC Privileges", func() {
 				{
 					APIGroups: []string{"operator.kyma-project.io"},
 					Resources: []string{"kymas"},
-					Verbs:     []string{"list", "watch"},
+					Verbs:     []string{"list", "watch", "delete", "create"},
 				},
 				{
 					APIGroups: []string{"operator.kyma-project.io"},
 					Resources: []string{"moduletemplates"},
-					Verbs:     []string{"list", "watch"},
+					Verbs:     []string{"list", "watch", "delete", "get"},
 				},
 			}
 			kymaSystemKlmRoleBindings, err := ListKlmRoleBindings(controlPlaneClient, ctx, "klm-controller-manager",