Skip to content

Commit 759bfdb

Browse files
vijaykatamakutz
authored andcommitted
Cluster actuator needs delete permission for secret.
Cluster delete is failing because secret delete permission is missing. Drive by: Setters for extra config are returning errors which are not being handled, fix by removing error return as it never returns error.
1 parent d598659 commit 759bfdb

File tree

3 files changed

+3
-1
lines changed

3 files changed

+3
-1
lines changed

config/rbac/rbac_role.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,7 @@ rules:
3939
- get
4040
- list
4141
- watch
42+
- delete
4243
- apiGroups:
4344
- ""
4445
resources:

pkg/cloud/vsphere/actuators/cluster/actuator.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ import (
4545

4646
//+kubebuilder:rbac:groups=vsphere.cluster.k8s.io,resources=vsphereclusterproviderspecs;vsphereclusterproviderstatuses,verbs=get;list;watch;create;update;patch;delete
4747
//+kubebuilder:rbac:groups=cluster.k8s.io,resources=clusters;clusters/status,verbs=get;list;watch;create;update;patch;delete
48-
//+kubebuilder:rbac:groups=,resources=secrets,verbs=create;get;list;watch
48+
//+kubebuilder:rbac:groups=,resources=secrets,verbs=create;get;list;watch;delete
4949
//+kubebuilder:rbac:groups="",resources=nodes;events;configmaps,verbs=get;list;watch;create;update;patch;delete
5050

5151
// Actuator is responsible for maintaining the Cluster objects.

scripts/e2e/bootstrap_job/spec/provider-components.template

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1061,6 +1061,7 @@ rules:
10611061
- get
10621062
- list
10631063
- watch
1064+
- delete
10641065
- apiGroups:
10651066
- ""
10661067
resources:

0 commit comments

Comments
 (0)