add missing RBAC rule for working with PrometheusRules

The operator cannot create PrometheusRules when enabled without this rule.
kube-logging · Sep 3, 2021 · 5a08d9c · 5a08d9c
1 parent 87804af
commit 5a08d9c
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 3 deletions.
diff --git a/charts/logging-operator/templates/clusterrole.yaml b/charts/logging-operator/templates/clusterrole.yaml
@@ -158,6 +158,7 @@ rules:
 - apiGroups:
   - monitoring.coreos.com
   resources:
+  - prometheusrules
   - servicemonitors
   verbs:
   - create

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -157,6 +157,7 @@ rules:
 - apiGroups:
   - monitoring.coreos.com
   resources:
+  - prometheusrules
   - servicemonitors
   verbs:
   - create

diff --git a/controllers/logging_controller.go b/controllers/logging_controller.go
@@ -65,7 +65,7 @@ type LoggingReconciler struct {
 // +kubebuilder:rbac:groups="",resources=nodes;namespaces;endpoints,verbs=get;list;watch
 // +kubebuilder:rbac:groups="";events.k8s.io,resources=events,verbs=create;get;list;watch
 // +kubebuilder:rbac:groups="rbac.authorization.k8s.io",resources=clusterroles;clusterrolebindings;roles;rolebindings,verbs=get;list;watch;create;update;patch;delete
-// +kubebuilder:rbac:groups=monitoring.coreos.com,resources=servicemonitors,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=monitoring.coreos.com,resources=prometheusrules;servicemonitors,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=coordination.k8s.io,resources=leases,verbs=*
 // +kubebuilder:rbac:groups=batch,resources=jobs,verbs=get;list;watch;create;update;patch;delete
 

diff --git a/pkg/sdk/static/gen/rbac/generated.go b/pkg/sdk/static/gen/rbac/generated.go