This is an automated email from the ASF dual-hosted git repository.
pcongiusti pushed a commit to branch release-2.9.x
in repository https://gitbox.apache.org/repos/asf/camel-k.git
The following commit(s) were added to refs/heads/release-2.9.x by this push:
new a0d8325a6 fix(install): add back missing rbac
a0d8325a6 is described below
commit a0d8325a6877f635e9f37bae4749324d7c08ee6d
Author: Pasquale Congiusti <[email protected]>
AuthorDate: Tue Jan 20 08:23:17 2026 +0100
fix(install): add back missing rbac
Closes #6444
---
.../rbac/descoped/operator-cluster-role-knative.yaml | 17 ++++++++---------
.../rbac/descoped/operator-cluster-role-leases.yaml | 2 --
.../rbac/descoped/operator-cluster-role-openshift.yaml | 7 +++++++
.../descoped/operator-cluster-role-podmonitors.yaml | 3 ---
.../rbac/descoped/operator-cluster-role-strimzi.yaml | 1 -
.../config/rbac/descoped/operator-cluster-role.yaml | 1 +
.../config/rbac/namespaced/operator-role-knative.yaml | 8 ++++++++
.../config/rbac/namespaced/operator-role-openshift.yaml | 9 ++++++++-
.../config/rbac/namespaced/operator-role-strimzi.yaml | 1 -
pkg/resources/config/rbac/namespaced/operator-role.yaml | 1 +
10 files changed, 33 insertions(+), 17 deletions(-)
diff --git
a/pkg/resources/config/rbac/descoped/operator-cluster-role-knative.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role-knative.yaml
index 73e013f76..f25ccc8d1 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role-knative.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role-knative.yaml
@@ -59,7 +59,6 @@ rules:
- get
- list
- patch
- # - update
- apiGroups:
- sources.knative.dev
resources:
@@ -70,11 +69,11 @@ rules:
- get
- list
- patch
- # - update
-# - apiGroups:
-# - ""
-# resources:
-# - namespaces
-# verbs:
-# - get
-# - patch
+# Required by EnableKnativeBindInNamespace
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ verbs:
+ - get
+ - patch
diff --git
a/pkg/resources/config/rbac/descoped/operator-cluster-role-leases.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role-leases.yaml
index a8fe10427..529907dbb 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role-leases.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role-leases.yaml
@@ -29,9 +29,7 @@ rules:
verbs:
- create
- delete
- # - deletecollection
- get
- list
- patch
- update
- # - watch
diff --git
a/pkg/resources/config/rbac/descoped/operator-cluster-role-openshift.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role-openshift.yaml
index dad1faee0..93a100a6f 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role-openshift.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role-openshift.yaml
@@ -97,3 +97,10 @@ rules:
- routes/custom-host
verbs:
- create
+ # Required by GetOpenshiftUser and GetOpenshiftSecurityContextRestricted
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ verbs:
+ - get
diff --git
a/pkg/resources/config/rbac/descoped/operator-cluster-role-podmonitors.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role-podmonitors.yaml
index 765c9c80f..8253c5786 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role-podmonitors.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role-podmonitors.yaml
@@ -29,9 +29,6 @@ rules:
verbs:
- create
- delete
- # - deletecollection
- get
- list
- patch
- # - update
- # - watch
diff --git
a/pkg/resources/config/rbac/descoped/operator-cluster-role-strimzi.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role-strimzi.yaml
index 3b0a96f16..f1210277b 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role-strimzi.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role-strimzi.yaml
@@ -31,4 +31,3 @@ rules:
verbs:
- get
- list
- # - watch
diff --git a/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
index d146b4b03..b41edc07b 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
@@ -124,6 +124,7 @@ rules:
- batch
resources:
- cronjobs
+ - jobs
verbs:
- create
- delete
diff --git a/pkg/resources/config/rbac/namespaced/operator-role-knative.yaml
b/pkg/resources/config/rbac/namespaced/operator-role-knative.yaml
index f3eaeb2b9..02ef24268 100644
--- a/pkg/resources/config/rbac/namespaced/operator-role-knative.yaml
+++ b/pkg/resources/config/rbac/namespaced/operator-role-knative.yaml
@@ -66,3 +66,11 @@ rules:
- get
- list
- patch
+# Required by EnableKnativeBindInNamespace
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ verbs:
+ - get
+ - patch
diff --git a/pkg/resources/config/rbac/namespaced/operator-role-openshift.yaml
b/pkg/resources/config/rbac/namespaced/operator-role-openshift.yaml
index b3fc88cbe..194a8e778 100644
--- a/pkg/resources/config/rbac/namespaced/operator-role-openshift.yaml
+++ b/pkg/resources/config/rbac/namespaced/operator-role-openshift.yaml
@@ -96,4 +96,11 @@ rules:
resources:
- routes/custom-host
verbs:
- - create
\ No newline at end of file
+ - create
+ # Required by GetOpenshiftUser and GetOpenshiftSecurityContextRestricted
+- apiGroups:
+ - ""
+ resources:
+ - namespaces
+ verbs:
+ - get
diff --git a/pkg/resources/config/rbac/namespaced/operator-role-strimzi.yaml
b/pkg/resources/config/rbac/namespaced/operator-role-strimzi.yaml
index a1f3958c7..bd884b6db 100644
--- a/pkg/resources/config/rbac/namespaced/operator-role-strimzi.yaml
+++ b/pkg/resources/config/rbac/namespaced/operator-role-strimzi.yaml
@@ -31,4 +31,3 @@ rules:
verbs:
- get
- list
- # - watch
diff --git a/pkg/resources/config/rbac/namespaced/operator-role.yaml
b/pkg/resources/config/rbac/namespaced/operator-role.yaml
index 94a1a124d..fbc0b2026 100644
--- a/pkg/resources/config/rbac/namespaced/operator-role.yaml
+++ b/pkg/resources/config/rbac/namespaced/operator-role.yaml
@@ -122,6 +122,7 @@ rules:
- batch
resources:
- cronjobs
+ - jobs
verbs:
- create
- delete
