Add pod read rbac

Signed-off-by: kouki <[email protected]>
kmdkuk · Dec 10, 2023 · 01f29f0 · 01f29f0
1 parent 58241b7
commit 01f29f0
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -28,6 +28,14 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources:

diff --git a/internal/controller/minecraft_controller.go b/internal/controller/minecraft_controller.go
@@ -59,6 +59,7 @@ func NewMinecraftReconciler(client client.Client, log logr.Logger, scheme *runti
 //+kubebuilder:rbac:groups=mcing.kmdkuk.com,resources=minecrafts/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=mcing.kmdkuk.com,resources=minecrafts/finalizers,verbs=update
 //+kubebuilder:rbac:groups=apps,resources=statefulsets,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch
 //+kubebuilder:rbac:groups=core,resources=services,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=core,resources=configmaps,verbs=get;list;watch;create;update;patch;delete
 
@@ -112,6 +113,7 @@ func (r *MinecraftReconciler) Reconcile(ctx context.Context, req ctrl.Request) (
 	}
 
 	r.minecraftManager.Update(client.ObjectKeyFromObject(mc))
+	log.Info("finish reconcilation")
 	return ctrl.Result{}, nil
 }