add permission of deleting KongRoute in RBAC (#800)

Kong · Oct 25, 2024 · c27f6e0 · c27f6e0
1 parent 550c937
commit c27f6e0
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/config/rbac/role/role.yaml b/config/rbac/role/role.yaml
@@ -152,7 +152,6 @@ rules:
   - kongdataplaneclientcertificates
   - kongkeys
   - kongkeysets
-  - kongroutes
   - kongservices
   - kongsnis
   - kongtargets
@@ -235,6 +234,17 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - configuration.konghq.com
+  resources:
+  - kongroutes
+  verbs:
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - coordination.k8s.io
   resources:

diff --git a/controller/konnect/reconciler_generic_rbac.go b/controller/konnect/reconciler_generic_rbac.go
@@ -58,7 +58,7 @@ package konnect
 //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongkeysets/status,verbs=update;patch
 //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongkeysets/finalizers,verbs=update;patch
 
-//+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongroutes,verbs=get;list;watch;update;patch
+//+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongroutes,verbs=get;list;watch;update;patch;delete
 //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongroutes/status,verbs=update;patch
 //+kubebuilder:rbac:groups=configuration.konghq.com,resources=kongroutes/finalizers,verbs=update;patch