Skip to content

Commit 834dc6d

Browse files
authored
fix: Add RBAC permission to patch events (#737)
* fix: Add RBAC permission to patch events * changelog
1 parent 82e51e9 commit 834dc6d

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

CHANGELOG.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,8 @@ All notable changes to this project will be documented in this file.
3636
- The default Kubernetes cluster domain name is now fetched from the kubelet API unless explicitly configured.
3737
- This requires operators to have the RBAC permission to get nodes/proxy in the apiGroup "". The helm-chart takes care of this.
3838
- The CLI argument `--kubernetes-node-name` or env variable `KUBERNETES_NODE_NAME` needs to be set. The helm-chart takes care of this.
39+
- The operator helm-chart now grants RBAC `patch` permissions on `events.k8s.io/events`,
40+
so events can be aggregated (e.g. "error happened 10 times over the last 5 minutes") ([#737]).
3941

4042
### Fixed
4143

@@ -63,6 +65,7 @@ All notable changes to this project will be documented in this file.
6365
[#725]: https://github.com/stackabletech/druid-operator/pull/725
6466
[#731]: https://github.com/stackabletech/druid-operator/pull/731
6567
[#735]: https://github.com/stackabletech/druid-operator/pull/735
68+
[#737]: https://github.com/stackabletech/druid-operator/pull/737
6669

6770
## [25.3.0] - 2025-03-21
6871

deploy/helm/druid-operator/templates/roles.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -172,6 +172,7 @@ rules:
172172
- events
173173
verbs:
174174
- create
175+
- patch
175176
{{ if .Capabilities.APIVersions.Has "security.openshift.io/v1" }}
176177
- apiGroups:
177178
- security.openshift.io

0 commit comments

Comments
 (0)