fix apache#1382: add permissions on olm and helm

nicolaferraro · Mar 31, 2020 · eedc8f6 · eedc8f6
1 parent 6204cb0
commit eedc8f6
Show file tree

Hide file tree

Showing 3 changed files with 47 additions and 0 deletions.
diff --git a/deploy/olm-catalog/camel-k/1.0.0-snapshot/camel-k.v1.0.0-snapshot.clusterserviceversion.yaml b/deploy/olm-catalog/camel-k/1.0.0-snapshot/camel-k.v1.0.0-snapshot.clusterserviceversion.yaml
@@ -409,6 +409,19 @@ spec:
           - clusterroles
           verbs:
           - bind
+        - apiGroups:
+          - monitoring.coreos.com
+          resources:
+          - servicemonitors
+          verbs:
+          - create
+          - delete
+          - deletecollection
+          - get
+          - list
+          - patch
+          - update
+          - watch
         serviceAccountName: camel-k-operator
     strategy: deployment
   installModes:

diff --git a/deploy/operator-role-olm.yaml b/deploy/operator-role-olm.yaml
@@ -221,3 +221,16 @@ rules:
   - bind
   resourceNames:
   - system:image-builder
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - servicemonitors
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch
diff --git a/helm/camel-k/templates/operator-role.yaml b/helm/camel-k/templates/operator-role.yaml
@@ -214,3 +214,24 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  verbs:
+  - bind
+  resourceNames:
+  - system:image-builder
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - servicemonitors
+  verbs:
+  - create
+  - delete
+  - deletecollection
+  - get
+  - list
+  - patch
+  - update
+  - watch