From 6d80eeccc335eb7b2694e7f9074a12fa8e7f267e Mon Sep 17 00:00:00 2001 From: Harold Cheng Date: Thu, 17 Jul 2025 13:51:41 +0800 Subject: [PATCH] fix: missing rbac rule for pod resize --- config/rbac/role.yaml | 6 ++++++ controllers/workloads/instanceset_controller.go | 1 + deploy/helm/config/rbac/role.yaml | 6 ++++++ 3 files changed, 13 insertions(+) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index c3114e76a08..af83f970170 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -455,6 +455,12 @@ rules: verbs: - get - list +- apiGroups: + - "" + resources: + - pods/resize + verbs: + - update - apiGroups: - "" resources: diff --git a/controllers/workloads/instanceset_controller.go b/controllers/workloads/instanceset_controller.go index 06c6dc5c9ca..a388137235f 100644 --- a/controllers/workloads/instanceset_controller.go +++ b/controllers/workloads/instanceset_controller.go @@ -55,6 +55,7 @@ type InstanceSetReconciler struct { // +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch;create;update;patch;delete;deletecollection // +kubebuilder:rbac:groups=core,resources=pods/status,verbs=get // +kubebuilder:rbac:groups=core,resources=pods/finalizers,verbs=update +// +kubebuilder:rbac:groups=core,resources=pods/resize,verbs=update // +kubebuilder:rbac:groups=core,resources=persistentvolumeclaims,verbs=get;list;watch;create;update;patch;delete // +kubebuilder:rbac:groups=core,resources=persistentvolumeclaims/status,verbs=get diff --git a/deploy/helm/config/rbac/role.yaml b/deploy/helm/config/rbac/role.yaml index c3114e76a08..af83f970170 100644 --- a/deploy/helm/config/rbac/role.yaml +++ b/deploy/helm/config/rbac/role.yaml @@ -455,6 +455,12 @@ rules: verbs: - get - list +- apiGroups: + - "" + resources: + - pods/resize + verbs: + - update - apiGroups: - "" resources: