rgw: fix blockOwnerDeletion error

This restores the missing permissions to allow the object controller to update the finalizers section in the spec. See https://sdk.operatorframework.io/docs/faqs/ Signed-off-by: Daniel Ruiz Capilla <crd1985@gmail.com> (cherry picked from commit 66cc462)
rook · Dec 17, 2021 · be08527 · be08527
1 parent 570dc42
commit be08527
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/deploy/charts/rook-ceph/templates/clusterrole.yaml b/deploy/charts/rook-ceph/templates/clusterrole.yaml
@@ -288,6 +288,11 @@ rules:
     verbs:
       # OBC controller updates OBC and OB statuses
       - update
+  - apiGroups: ["objectbucket.io"]
+    resources: ["objectbucketclaims/finalizers", "objectbuckets/finalizers"]
+    verbs:
+      # OBC controller updates OBC and OB finalizers
+      - update
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1

diff --git a/deploy/examples/common.yaml b/deploy/examples/common.yaml
@@ -464,6 +464,11 @@ rules:
     verbs:
       # OBC controller updates OBC and OB statuses
       - update
+  - apiGroups: ["objectbucket.io"]
+    resources: ["objectbucketclaims/finalizers", "objectbuckets/finalizers"]
+    verbs:
+      # OBC controller updates OBC and OB finalizers
+      - update
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1