Merge pull request #129 from k8s-infra-cherrypick-robot/cherry-pick-1…

…27-to-release-0.4 [release-0.4] RBAC add new api's to nfd-master role
kubernetes-sigs · Feb 17, 2022 · 4f4e315 · 4f4e315
2 parents f0872b3 + 32da789
commit 4f4e315
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 0 deletions.
diff --git a/build/assets/master/0200_clusterrole.yaml b/build/assets/master/0200_clusterrole.yaml
@@ -13,3 +13,19 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - topology.node.k8s.io
+  resources:
+  - noderesourcetopologies
+  verbs:
+  - create
+  - get
+  - update
+- apiGroups:
+  - nfd.k8s-sigs.io
+  resources:
+  - nodefeaturerules
+  verbs:
+  - get
+  - list
+  - watch
diff --git a/config/rbac/kustomization.yaml b/config/rbac/kustomization.yaml
@@ -33,3 +33,25 @@ patchesJSON6902:
         - use
         resourceNames:
         - nfd-worker
+    - op: add
+      path: /rules/1
+      value:
+        apiGroups:
+        - nfd.k8s-sigs.io
+        resources:
+        - nodefeaturerules
+        verbs:
+        - get
+        - list
+        - watch
+    - op: add
+      path: /rules/2
+      value:
+        apiGroups:
+        - topology.node.k8s.io
+        resources:
+        - noderesourcetopologies
+        verbs:
+        - create
+        - get
+        - update