fix missing rbac rules

Signed-off-by: Artem Bortnikov <[email protected]>
ironcore-dev · Jun 12, 2024 · c34b3ed · c34b3ed
1 parent b5b0486
commit c34b3ed
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -31,6 +31,20 @@ rules:
   - ips/status
   verbs:
   - get
+- apiGroups:
+  - metal.ironcore.dev
+  resources:
+  - inventories
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - metal.ironcore.dev
+  resources:
+  - inventories/status
+  verbs:
+  - get
 - apiGroups:
   - metal.ironcore.dev
   resources:

diff --git a/internal/controller/machine_controller.go b/internal/controller/machine_controller.go
@@ -26,6 +26,8 @@ import (
 // +kubebuilder:rbac:groups=metal.ironcore.dev,resources=machines,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=metal.ironcore.dev,resources=machines/status,verbs=get;update;patch
 // +kubebuilder:rbac:groups=metal.ironcore.dev,resources=machines/finalizers,verbs=update
+// +kubebuilder:rbac:groups=metal.ironcore.dev,resources=inventories,verbs=get;list;watch
+// +kubebuilder:rbac:groups=metal.ironcore.dev,resources=inventories/status,verbs=get
 
 const (
 	MachineFieldOwner      string = "metal.ironcore.dev/machine"