Merge pull request #156 from octarinesec/openshift-support-5-6-2

OpenShift's Route & DeploymentConfig support
octarinesec · Jun 15, 2023 · 011237f · 011237f
2 parents ea4e607 + f11aa21
commit 011237f
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/cbcontainers/state/components/enforcer_mutating_webhook.go b/cbcontainers/state/components/enforcer_mutating_webhook.go
@@ -206,6 +206,8 @@ func (obj *EnforcerMutatingWebhookK8sObject) getResourcesList() []string {
 		"cronjobs",
 		"ingresses",
 		"customresourcedefinitions",
+		"deploymentconfigs",
+		"routes",
 	}
 }
 

diff --git a/cbcontainers/state/components/enforcer_validating_webhook.go b/cbcontainers/state/components/enforcer_validating_webhook.go
@@ -216,6 +216,8 @@ func (obj *EnforcerValidatingWebhookK8sObject) getResourcesList() []string {
 		"cronjobs",
 		"ingresses",
 		"customresourcedefinitions",
+		"deploymentconfigs",
+		"routes",
 	}
 }
 

diff --git a/charts/cbcontainers-agent/cbcontainers-agent-chart/templates/rbac.yaml b/charts/cbcontainers-agent/cbcontainers-agent-chart/templates/rbac.yaml
@@ -80,6 +80,8 @@ rules:
       - networking.k8s.io
       - rbac
       - rbac.authorization.k8s.io
+      - apps.openshift.io
+      - route.openshift.io
     resources:
       - clusterrolebindings
       - cronjobs
@@ -96,6 +98,8 @@ rules:
       - rolebindings
       - services
       - statefulsets
+      - deploymentconfigs
+      - routes
     verbs:
       - watch
 ---

diff --git a/config/rbac/dataplane_roles.yaml b/config/rbac/dataplane_roles.yaml
@@ -94,6 +94,8 @@ rules:
       - networking.k8s.io
       - rbac
       - rbac.authorization.k8s.io
+      - apps.openshift.io
+      - route.openshift.io
     resources:
       - clusterrolebindings
       - cronjobs
@@ -110,5 +112,7 @@ rules:
       - rolebindings
       - services
       - statefulsets
+      - deploymentconfigs
+      - routes
     verbs:
       - watch