Skip to content

Commit 23d45a0

Browse files
committed
Fix scc issues with VMFR
Fixes issue #53 Signed-off-by: Michal Pryc <mpryc@redhat.com>
1 parent 21b8a2b commit 23d45a0

File tree

2 files changed

+9
-0
lines changed

2 files changed

+9
-0
lines changed

config/rbac/role.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,14 @@ rules:
9393
- patch
9494
- update
9595
- watch
96+
- apiGroups:
97+
- security.openshift.io
98+
resourceNames:
99+
- privileged
100+
resources:
101+
- securitycontextconstraints
102+
verbs:
103+
- use
96104
- apiGroups:
97105
- velero.io
98106
resources:

internal/controller/virtualmachinefilerestore_controller.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,7 @@ func (e ErrUnsupportedBackup) Error() string {
9595
// +kubebuilder:rbac:groups="",resources=persistentvolumeclaims,verbs=get;list;watch
9696
// +kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;patch;delete
9797
// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;create;update;patch;delete
98+
// +kubebuilder:rbac:groups=security.openshift.io,resources=securitycontextconstraints,resourceNames=privileged,verbs=use
9899
// +kubebuilder:rbac:groups=apps,resources=deployments,verbs=get;list;watch;create;update;patch;delete
99100
// +kubebuilder:rbac:groups=velero.io,resources=restores,verbs=get;list;watch;create;update;patch;delete
100101
// +kubebuilder:rbac:groups=velero.io,resources=backups,verbs=get;list;watch

0 commit comments

Comments
 (0)