Add RBAC permissions for edit and admin roles

Signed-off-by: Roman Mohr <[email protected]>
agracey · Sep 20, 2022 · 5ae5f4c · 5ae5f4c
1 parent 5e872d0
commit 5ae5f4c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/pkg/virt-operator/resource/generate/rbac/cluster.go b/pkg/virt-operator/resource/generate/rbac/cluster.go
@@ -140,6 +140,7 @@ func newAdminClusterRole() *rbacv1.ClusterRole {
 				Resources: []string{
 					"virtualmachineinstances/console",
 					"virtualmachineinstances/vnc",
+					"virtualmachineinstances/vnc/screenshot",
 					VMInstancesGuestOSInfo,
 					VMInstancesFileSysList,
 					VMInstancesUserList,
@@ -272,6 +273,7 @@ func newEditClusterRole() *rbacv1.ClusterRole {
 				Resources: []string{
 					"virtualmachineinstances/console",
 					"virtualmachineinstances/vnc",
+					"virtualmachineinstances/vnc/screenshot",
 					VMInstancesGuestOSInfo,
 					VMInstancesFileSysList,
 					VMInstancesUserList,

diff --git a/tests/access_test.go b/tests/access_test.go
@@ -413,6 +413,7 @@ var _ = Describe("[rfe_id:500][crit:high][arm64][vendor:[email protected]][level
 				Entry("[test_id:2921]given a vmi (softreboot)", "virtualmachineinstances/softreboot", "update"),
 				Entry("[test_id:2921]given a vmi (console)", "virtualmachineinstances/console", "get"),
 				Entry("[test_id:2921]given a vmi (vnc)", "virtualmachineinstances/vnc", "get"),
+				Entry("[test_id:2921]given a vmi (vnc/screenshot)", "virtualmachineinstances/vnc/screenshot", "get"),
 			)
 		})
 
@@ -454,6 +455,7 @@ var _ = Describe("[rfe_id:500][crit:high][arm64][vendor:[email protected]][level
 				Entry("[test_id:2921]given a vmi (softreboot)", "virtualmachineinstances/softreboot", "update"),
 				Entry("[test_id:2921]given a vmi (console)", "virtualmachineinstances/console", "get"),
 				Entry("[test_id:2921]given a vmi (vnc)", "virtualmachineinstances/vnc", "get"),
+				Entry("[test_id:2921]given a vmi (vnc/screenshot)", "virtualmachineinstances/vnc/screenshot", "get"),
 				Entry("[test_id:2921]given a vmi (guestosinfo)", "virtualmachineinstances/guestosinfo", "get"),
 			)
 		})