Merge pull request #790 from k8up-io/chart-watch-perm

Add missing watch permissions to chart

Author: ccremer

charts/k8up/Chart.yaml

@@ -6,7 +6,7 @@ keywords:
   - backup
   - operator
   - restic
-version: 4.0.0
+version: 4.0.1
 sources:
   - https://github.com/k8up-io/k8up
 maintainers:

charts/k8up/README.md

@@ -1,6 +1,6 @@
 # k8up
 
-![Version: 4.0.0](https://img.shields.io/badge/Version-4.0.0-informational?style=flat-square)
+![Version: 4.0.1](https://img.shields.io/badge/Version-4.0.1-informational?style=flat-square)
 
 Kubernetes and OpenShift Backup Operator based on restic
 
@@ -13,7 +13,7 @@ helm repo add k8up-io https://k8up-io.github.io/k8up
 helm install k8up k8up-io/k8up
 ```
 ```bash
-kubectl apply -f https://github.com/k8up-io/k8up/releases/download/k8up-4.0.0/k8up-crd.yaml
+kubectl apply -f https://github.com/k8up-io/k8up/releases/download/k8up-4.0.1/k8up-crd.yaml
 ```
 
 <!---

charts/k8up/templates/operator-clusterrole.yaml

@@ -85,6 +85,7 @@ rules:
       - delete
       - get
       - list
+      - watch
   - apiGroups:
       - k8up.io
     resources:
@@ -260,4 +261,5 @@ rules:
       - delete
       - get
       - list
+      - watch
 {{- end -}}

config/rbac/role.yaml

@@ -83,6 +83,7 @@ rules:
   - delete
   - get
   - list
+  - watch
 - apiGroups:
   - k8up.io
   resources:
@@ -258,3 +259,4 @@ rules:
   - delete
   - get
   - list
+  - watch

operator/backupcontroller/setup.go

@@ -15,9 +15,9 @@ import (
 // +kubebuilder:rbac:groups=batch,resources=jobs,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=core,resources=pods,verbs="*"
 // +kubebuilder:rbac:groups=core,resources=pods/exec,verbs="*"
-// +kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;list;create;delete
+// +kubebuilder:rbac:groups=core,resources=serviceaccounts,verbs=get;list;watch;create;delete
 // +kubebuilder:rbac:groups=core,resources=persistentvolumeclaims,verbs=get;list;watch
-// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles;rolebindings,verbs=get;list;create;delete
+// +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=roles;rolebindings,verbs=get;list;watch;create;delete
 
 // SetupWithManager configures the reconciler.
 func (r *BackupReconciler) SetupWithManager(mgr controllerruntime.Manager, _ logr.Logger) error {