add rbac

KusionStack · Nov 3, 2023 · 98bb564 · 98bb564
1 parent 2e9ac4a
commit 98bb564
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -123,3 +123,15 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - ""
+  resources:
+  - services
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
diff --git a/pkg/controllers/add_alibaba_cloud_slb.go b/pkg/controllers/add_alibaba_cloud_slb.go
@@ -28,6 +28,10 @@ func init() {
 	AddToManagerFuncs = append(AddToManagerFuncs, Add)
 }
 
+// +kubebuilder:rbac:groups=core,resources=services,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=core,resources=pods/status,verbs=get;update;patch
+
 func Add(manager manager.Manager) error {
 	if !feature.DefaultFeatureGate.Enabled(features.AlibabaCloudSlb) {
 		return nil