intel-device-plugins-for-ku.../deployments/operator/rbac
Mikko Ylinen b63bb53057 operator: allow controllers to touch ownerReferences always
Resources in clusters with OwnerReferencesPermissionEnforcement
(e.g., OpenShift) get stricter checks for metadata.ownerReferences.

This appears via errors like:
“is forbidden: cannot set blockOwnerDeletion if an ownerReference refers to
a resource you can’t set finalizers on: ...”

The fix is to add "update" permissions to finalizers subresource
for the xDevicePlugins resources.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-11-26 08:28:29 +02:00
..
auth_proxy_client_clusterrole.yaml deployments: Move to v1 in RBAC API 2021-02-18 12:47:55 +00:00
auth_proxy_role_binding.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
auth_proxy_role.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
auth_proxy_service.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
fpgadeviceplugin_editor_role.yaml operator: add simple FPGA operator combined with FPGA webhook 2020-08-18 17:32:23 +03:00
fpgadeviceplugin_viewer_role.yaml operator: add simple FPGA operator combined with FPGA webhook 2020-08-18 17:32:23 +03:00
gpu_manager_role.yaml gpu resource manager operator parts 2021-06-24 11:49:08 +03:00
gpudeviceplugin_editor_role.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
gpudeviceplugin_viewer_role.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
kustomization.yaml gpu resource manager operator parts 2021-06-24 11:49:08 +03:00
leader_election_role_binding.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
leader_election_role.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
qatdeviceplugin_editor_role.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
qatdeviceplugin_viewer_role.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
role_binding.yaml operator: initial version with gpu and qat controllers 2020-06-25 13:48:41 +03:00
role.yaml operator: allow controllers to touch ownerReferences always 2021-11-26 08:28:29 +02:00