diff --git a/bundle/manifests/compliance-operator.clusterserviceversion.yaml b/bundle/manifests/compliance-operator.clusterserviceversion.yaml index cf831c2d08..0e97324b0d 100644 --- a/bundle/manifests/compliance-operator.clusterserviceversion.yaml +++ b/bundle/manifests/compliance-operator.clusterserviceversion.yaml @@ -1590,6 +1590,15 @@ spec: - get - list - watch + - apiGroups: + - networking.k8s.io + resources: + - networkpolicies + verbs: + - create + - delete + - get + - update serviceAccountName: compliance-operator - rules: - apiGroups: diff --git a/config/manifests/bases/compliance-operator.clusterserviceversion.yaml b/config/manifests/bases/compliance-operator.clusterserviceversion.yaml index 5acf97db4e..2c5e8d91a2 100644 --- a/config/manifests/bases/compliance-operator.clusterserviceversion.yaml +++ b/config/manifests/bases/compliance-operator.clusterserviceversion.yaml @@ -1412,6 +1412,15 @@ spec: - get - list - watch + - apiGroups: + - networking.k8s.io + resources: + - networkpolicies + verbs: + - create + - delete + - get + - update serviceAccountName: compliance-operator - rules: - apiGroups: diff --git a/config/rbac/operator_role.yaml b/config/rbac/operator_role.yaml index 36ef1a7fba..022a95cbca 100644 --- a/config/rbac/operator_role.yaml +++ b/config/rbac/operator_role.yaml @@ -137,3 +137,12 @@ rules: - get - list - watch + - apiGroups: + - networking.k8s.io + resources: + - networkpolicies + verbs: + - create + - delete + - get + - update diff --git a/pkg/controller/compliancescan/compliancescan_controller.go b/pkg/controller/compliancescan/compliancescan_controller.go index de9fdde3f9..dc5cc8190c 100644 --- a/pkg/controller/compliancescan/compliancescan_controller.go +++ b/pkg/controller/compliancescan/compliancescan_controller.go @@ -124,6 +124,7 @@ type ReconcileComplianceScan struct { //+kubebuilder:rbac:groups=batch,resources=cronjobs,verbs=get,list,watch,create,delete,update //+kubebuilder:rbac:groups=batch,resources=jobs,verbs=deletecollection //+kubebuilder:rbac:groups=image.openshift.io,resources=imagestreamtags,verbs=get,list,watch +//+kubebuilder:rbac:groups=networking.k8s.io,resources=networkpolicies,verbs=create,delete,get,update //+kubebuilder:rbac:groups=scheduling.k8s.io,resources=priorityclasses,verbs=get,list,watch //+kubebuilder:rbac:groups=cluster.open-cluster-management.io,resources=clusterclaims,verbs=get,list,watch //+kubebuilder:rbac:groups=config.openshift.io,resources=infrastructures,verbs=get,list,watch