From 5f4e7e577f0a1cbdc926cb41ceaab270712c022a Mon Sep 17 00:00:00 2001 From: Zaggy21 Date: Wed, 8 Jul 2026 15:58:00 +0200 Subject: [PATCH 1/2] fix: add events.k8s.io RBAC marker and regenerate role.yaml On-behalf-of: @SAP krzysztof.zagorski@sap.com Signed-off-by: Zaggy21 --- config/rbac/role.yaml | 13 +++++++------ .../careinstruction/careinstruction_controller.go | 5 +++-- 2 files changed, 10 insertions(+), 8 deletions(-) diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml index 8d10cac..41e2062 100644 --- a/config/rbac/role.yaml +++ b/config/rbac/role.yaml @@ -21,23 +21,24 @@ rules: - apiGroups: - "" resources: - - events + - secrets verbs: - create - delete + - get + - list - patch + - update + - watch - apiGroups: - "" + - events.k8s.io resources: - - secrets + - events verbs: - create - delete - - get - - list - patch - - update - - watch - apiGroups: - greenhouse.sap resources: diff --git a/controller/careinstruction/careinstruction_controller.go b/controller/careinstruction/careinstruction_controller.go index 6be0833..7b762377 100644 --- a/controller/careinstruction/careinstruction_controller.go +++ b/controller/careinstruction/careinstruction_controller.go @@ -57,11 +57,12 @@ type garden struct { type careInstructionContextKey struct{} //+kubebuilder:rbac:groups=shoot-grafter.cloudoperators.dev,resources=careinstructions,verbs=get;list;watch;create;update;patch;delete -// +kubebuilder:rbac:groups=shoot-grafter.cloudoperators.dev,resources=careinstructions/status,verbs=get;update;patch +//+kubebuilder:rbac:groups=shoot-grafter.cloudoperators.dev,resources=careinstructions/status,verbs=get;update;patch //+kubebuilder:rbac:groups=greenhouse.sap,resources=clusters,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;update;patch -// +kubebuilder:rbac:groups="",resources=events,verbs=create;patch;delete +//+kubebuilder:rbac:groups="",resources=events,verbs=create;patch;delete +//+kubebuilder:rbac:groups="events.k8s.io",resources=events,verbs=create;patch;delete func (r *CareInstructionReconciler) SetupWithManager(mgr ctrl.Manager) error { // Setup the controller with the manager From 0b4040a195a48ed8fb1d2ad0068a66d534283a7a Mon Sep 17 00:00:00 2001 From: Krzysztof Zagorski Date: Wed, 8 Jul 2026 17:41:48 +0200 Subject: [PATCH 2/2] remove quotes around events.k8s.io Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Signed-off-by: Krzysztof Zagorski --- controller/careinstruction/careinstruction_controller.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/controller/careinstruction/careinstruction_controller.go b/controller/careinstruction/careinstruction_controller.go index 7b762377..53abc53 100644 --- a/controller/careinstruction/careinstruction_controller.go +++ b/controller/careinstruction/careinstruction_controller.go @@ -62,7 +62,7 @@ type careInstructionContextKey struct{} //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;patch;delete //+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;update;patch //+kubebuilder:rbac:groups="",resources=events,verbs=create;patch;delete -//+kubebuilder:rbac:groups="events.k8s.io",resources=events,verbs=create;patch;delete +//+kubebuilder:rbac:groups=events.k8s.io,resources=events,verbs=create;patch;delete func (r *CareInstructionReconciler) SetupWithManager(mgr ctrl.Manager) error { // Setup the controller with the manager