From be085276db5d86e317279e95ad1de8b0768c1f90 Mon Sep 17 00:00:00 2001 From: Daniel Ruiz Capilla Date: Thu, 16 Dec 2021 09:09:09 +0100 Subject: [PATCH] rgw: fix blockOwnerDeletion error This restores the missing permissions to allow the object controller to update the finalizers section in the spec. See https://sdk.operatorframework.io/docs/faqs/ Signed-off-by: Daniel Ruiz Capilla (cherry picked from commit 66cc46220fba97ab86dbc3c74c2426fe2a6ec89d) --- deploy/charts/rook-ceph/templates/clusterrole.yaml | 5 +++++ deploy/examples/common.yaml | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/deploy/charts/rook-ceph/templates/clusterrole.yaml b/deploy/charts/rook-ceph/templates/clusterrole.yaml index 89570cffb4bd..eb2382c28b85 100644 --- a/deploy/charts/rook-ceph/templates/clusterrole.yaml +++ b/deploy/charts/rook-ceph/templates/clusterrole.yaml @@ -288,6 +288,11 @@ rules: verbs: # OBC controller updates OBC and OB statuses - update + - apiGroups: ["objectbucket.io"] + resources: ["objectbucketclaims/finalizers", "objectbuckets/finalizers"] + verbs: + # OBC controller updates OBC and OB finalizers + - update --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml index 8f7977bb5cf3..397f8cb682f0 100644 --- a/deploy/examples/common.yaml +++ b/deploy/examples/common.yaml @@ -464,6 +464,11 @@ rules: verbs: # OBC controller updates OBC and OB statuses - update + - apiGroups: ["objectbucket.io"] + resources: ["objectbucketclaims/finalizers", "objectbuckets/finalizers"] + verbs: + # OBC controller updates OBC and OB finalizers + - update --- kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1