intel-device-plugins-for-ku.../deployments/operator/webhook
Mikko Ylinen b63bb53057 operator: allow controllers to touch ownerReferences always
Resources in clusters with OwnerReferencesPermissionEnforcement
(e.g., OpenShift) get stricter checks for metadata.ownerReferences.

This appears via errors like:
“is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to
a resource you can’t set finalizers on: ...”

The fix is to add "update" permissions to finalizers subresource
for the xDevicePlugins resources.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-11-26 08:28:29 +02:00
..
kustomization.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
kustomizeconfig.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
manifests.yaml operator: allow controllers to touch ownerReferences always 2021-11-26 08:28:29 +02:00
service.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00