diff --git a/cbcontainers/state/components/enforcer_mutating_webhook.go b/cbcontainers/state/components/enforcer_mutating_webhook.go index 3081b93b..6711eeaa 100644 --- a/cbcontainers/state/components/enforcer_mutating_webhook.go +++ b/cbcontainers/state/components/enforcer_mutating_webhook.go @@ -206,6 +206,8 @@ func (obj *EnforcerMutatingWebhookK8sObject) getResourcesList() []string { "cronjobs", "ingresses", "customresourcedefinitions", + "deploymentconfigs", + "routes", } } diff --git a/cbcontainers/state/components/enforcer_validating_webhook.go b/cbcontainers/state/components/enforcer_validating_webhook.go index be16f306..1e855f1e 100644 --- a/cbcontainers/state/components/enforcer_validating_webhook.go +++ b/cbcontainers/state/components/enforcer_validating_webhook.go @@ -216,6 +216,8 @@ func (obj *EnforcerValidatingWebhookK8sObject) getResourcesList() []string { "cronjobs", "ingresses", "customresourcedefinitions", + "deploymentconfigs", + "routes", } } diff --git a/charts/cbcontainers-agent/cbcontainers-agent-chart/templates/rbac.yaml b/charts/cbcontainers-agent/cbcontainers-agent-chart/templates/rbac.yaml index e4e11c81..1e55200a 100644 --- a/charts/cbcontainers-agent/cbcontainers-agent-chart/templates/rbac.yaml +++ b/charts/cbcontainers-agent/cbcontainers-agent-chart/templates/rbac.yaml @@ -80,6 +80,8 @@ rules: - networking.k8s.io - rbac - rbac.authorization.k8s.io + - apps.openshift.io + - route.openshift.io resources: - clusterrolebindings - cronjobs @@ -96,6 +98,8 @@ rules: - rolebindings - services - statefulsets + - deploymentconfigs + - routes verbs: - watch --- diff --git a/config/rbac/dataplane_roles.yaml b/config/rbac/dataplane_roles.yaml index 9304b7b3..6aab8a8f 100644 --- a/config/rbac/dataplane_roles.yaml +++ b/config/rbac/dataplane_roles.yaml @@ -94,6 +94,8 @@ rules: - networking.k8s.io - rbac - rbac.authorization.k8s.io + - apps.openshift.io + - route.openshift.io resources: - clusterrolebindings - cronjobs @@ -110,5 +112,7 @@ rules: - rolebindings - services - statefulsets + - deploymentconfigs + - routes verbs: - watch \ No newline at end of file