Fix controller's roles + pusher webhook service

syngit-org · May 29, 2024 · 6c3d32a · 6c3d32a
1 parent 064b70e
commit 6c3d32a
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 4 deletions.
diff --git a/chart/0.0.1/templates/rbac/controller/role.yaml b/chart/0.0.1/templates/rbac/controller/role.yaml
@@ -15,6 +15,14 @@ rules:
   - get
   - list
   - watch
+# Create and patch events related to kgio objects in any namespace
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - admissionregistration.k8s.io
   resources:
@@ -30,11 +38,19 @@ rules:
 - apiGroups:
   - kgio.dams.kgio
   resources:
-  - gitremote
+  - gitremotes
   verbs:
   - get
   - list
   - watch
+- apiGroups:
+  - kgio.dams.kgio
+  resources:
+  - gitremotes/status
+  verbs:
+  - get
+  - patch
+  - update
 - apiGroups:
   - kgio.dams.kgio
   resources:

diff --git a/chart/0.0.1/templates/webhook/webhook-service.yaml b/chart/0.0.1/templates/webhook/webhook-service.yaml
@@ -25,7 +25,7 @@ metadata:
     app.kubernetes.io/component: webhook
     app.kubernetes.io/created-by: dams
     app.kubernetes.io/part-of: {{ .Release.Name }}
-  name: {{ .Values.webhook.services.pusher }}
+  name: webhook-pusher-service
 spec:
   ports:
     - port: 443

diff --git a/chart/0.0.1/values.yaml b/chart/0.0.1/values.yaml
@@ -6,7 +6,6 @@ webhook:
     secret: webhook-server-cert
   services:
     crd: webhook-crd-service
-    pusher: webhook-pusher-service
 
 controller:
   securityContext:

diff --git a/internal/controller/resourcesinterceptor_controller.go b/internal/controller/resourcesinterceptor_controller.go
@@ -88,7 +88,7 @@ func (r *ResourcesInterceptorReconciler) Reconcile(ctx context.Context, req ctrl
 	}
 
 	// The service is located in the manager/controller namespace
-	serviceName := "resources-interceptor-webhook"
+	serviceName := "webhook-pusher-service"
 	operatorNamespace := r.Namespace
 	clientConfig := admissionv1.WebhookClientConfig{
 		Service: &admissionv1.ServiceReference{