Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Group dependencies together for simplicity #989

Merged
merged 1 commit into from
Sep 26, 2023

Conversation

bdunne
Copy link
Member

@bdunne bdunne commented Sep 13, 2023

Also, restrict route permissions to only what we need

Also, restrict route permissions to only what we need
@miq-bot
Copy link
Member

miq-bot commented Sep 13, 2023

Checked commit bdunne@f53d90f with ruby 2.6.10, rubocop 1.28.2, haml-lint 0.35.0, and yamllint
1 file checked, 1 offense detected

**

  • 💣 💥 🔥 🚒 - Linter/Yaml - missing config files

@Fryguy Fryguy merged commit 176b398 into ManageIQ:master Sep 26, 2023
3 checks passed
@bdunne bdunne deleted the rbac_cleanup branch September 26, 2023 18:32
@Fryguy
Copy link
Member

Fryguy commented Sep 27, 2023

Backported to quinteros in commit 4fd186e.

commit 4fd186ee009bc1551da82b835a60d04dadcb2279
Author: Jason Frey <fryguy9@gmail.com>
Date:   Tue Sep 26 14:30:12 2023 -0400

    Merge pull request #989 from bdunne/rbac_cleanup
    
    Group dependencies together for simplicity
    
    (cherry picked from commit 176b398c67e3b32a1bd3a8227ace19a4c3cf9abe)

Fryguy added a commit that referenced this pull request Sep 27, 2023
Group dependencies together for simplicity

(cherry picked from commit 176b398)
bdunne added a commit to bdunne/manageiq-pods that referenced this pull request Sep 28, 2023
routes:
E0928 15:56:00.508746       1 reflector.go:147] pkg/mod/k8s.io/client-go@v0.28.0-rc.0/tools/cache/reflector.go:229: Failed to watch *v1.Route: failed to list *v1.Route: routes.route.openshift.io is forbidden: User "system:serviceaccount:petrosian-1:manageiq-operator" cannot list resource "routes" in API group "route.openshift.io" in the namespace "petrosian-1"
W0928 15:56:44.778213       1 reflector.go:535] pkg/mod/k8s.io/client-go@v0.28.0-rc.0/tools/cache/reflector.go:229: failed to list *v1.Route: routes.route.openshift.io is forbidden: User "system:serviceaccount:petrosian-1:manageiq-operator" cannot list resource "routes" in API group "route.openshift.io" in the namespace "petrosian-1"

routes/custom-host:
2023-09-28T16:30:38Z	ERROR	Reconciler error	{"controller": "manageiq", "controllerGroup": "manageiq.org", "controllerKind": "ManageIQ", "ManageIQ": {"name":"manageiq-sample","namespace":"petrosian-1"}, "namespace": "petrosian-1", "name": "manageiq-sample", "reconcileID": "78aec8d7-f66d-4d63-8203-60f031384f19", "error": "Route.route.openshift.io \"httpd\" is invalid: spec.host: Forbidden: you do not have permission to set the host field of the route"}
Fryguy added a commit that referenced this pull request Sep 29, 2023
Fix route permissions issues after #989
Fryguy added a commit that referenced this pull request Sep 29, 2023
Fix route permissions issues after #989

(cherry picked from commit 7f24767)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants