This is an automated email from the ASF dual-hosted git repository.
pcongiusti pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-k.git
The following commit(s) were added to refs/heads/main by this push:
new 71eace5ab fix(install): revert watch rbac
71eace5ab is described below
commit 71eace5abd4e4778b51dbf1f3e882f8722b0f1de
Author: Pasquale Congiusti <[email protected]>
AuthorDate: Thu Jan 22 08:44:35 2026 +0100
fix(install): revert watch rbac
---
.../config/rbac/descoped/operator-cluster-role.yaml | 2 ++
pkg/resources/config/rbac/namespaced/operator-role.yaml | 12 ++++++++++++
2 files changed, 14 insertions(+)
diff --git a/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
b/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
index b41edc07b..54147b9f9 100644
--- a/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
+++ b/pkg/resources/config/rbac/descoped/operator-cluster-role.yaml
@@ -193,6 +193,7 @@ rules:
- get
- list
- patch
+ - watch
# Service Accounts (dynamic SA creation)
- apiGroups:
- ""
@@ -203,6 +204,7 @@ rules:
- delete
- get
- list
+ - watch
# Required to check if a ServiceAccount can access other namespaces resources
- apiGroups:
- authorization.k8s.io
diff --git a/pkg/resources/config/rbac/namespaced/operator-role.yaml
b/pkg/resources/config/rbac/namespaced/operator-role.yaml
index fbc0b2026..27a264bee 100644
--- a/pkg/resources/config/rbac/namespaced/operator-role.yaml
+++ b/pkg/resources/config/rbac/namespaced/operator-role.yaml
@@ -180,6 +180,17 @@ rules:
verbs:
- get
- list
+# Service Accounts (dynamic SA creation)
+- apiGroups:
+ - ""
+ resources:
+ - serviceaccounts
+ verbs:
+ - create
+ - delete
+ - get
+ - list
+ - watch
# Roles and RoleBindings
- apiGroups:
- rbac.authorization.k8s.io
@@ -192,3 +203,4 @@ rules:
- get
- list
- patch
+ - watch
