Add additional RBAC permissions to CoreDNS ClusterRole related to DNS…

…NameResolver CR
openshift · Jul 12, 2024 · 05c8a76 · 05c8a76
1 parent 8053f58
commit 05c8a76
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/operator/controller/controller_cluster_role.go b/pkg/operator/controller/controller_cluster_role.go
@@ -63,12 +63,12 @@ func addDNSNameResolverPolicyRule(cr *rbacv1.ClusterRole) {
 	cr.Rules = append(cr.Rules, rbacv1.PolicyRule{
 		APIGroups: []string{"network.openshift.io"},
 		Resources: []string{"dnsnameresolvers"},
-		Verbs:     []string{"list", "watch"},
+		Verbs:     []string{"get", "list", "watch"},
 	})
 	cr.Rules = append(cr.Rules, rbacv1.PolicyRule{
 		APIGroups: []string{"network.openshift.io"},
 		Resources: []string{"dnsnameresolvers/status"},
-		Verbs:     []string{"update"},
+		Verbs:     []string{"get", "update", "patch"},
 	})
 }