Fix Events RBAC

contrib/manifests/rbac.yaml

@@ -16,38 +16,36 @@ kind: Role
 metadata:
   name: mysql-operator
 rules:
-  - apiGroups:
-    - ""
-    resources:
-    - pods
+  - apiGroups: [""]
+    resources: ["pods"]
     verbs:
     - get
     - list
     - patch
     - update
     - watch
 
-  - apiGroups:
-    - ""
-    resources:
-    - secrets
-    verbs:
-    - create
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["create"]
 
-  - apiGroups:
-    - ""
-    resources:
-    - services
+  - apiGroups: [""]
+    resources: ["services"]
     verbs:
     - create
     - get
     - list
     - watch
 
-  - apiGroups:
-    - apps
-    resources:
-    - statefulsets
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs:
+    - create
+    - update
+    - patch
+
+  - apiGroups: ["apps"]
+    resources: ["statefulsets"]
     verbs:
     - create
     - get
@@ -56,8 +54,7 @@ rules:
     - update
     - watch
 
-  - apiGroups:
-    - mysql.oracle.com
+  - apiGroups: ["mysql.oracle.com"]
     resources:
     - mysqlbackups
     - mysqlbackupschedules
@@ -70,39 +67,37 @@ rules:
     - update
     - watch
 
-  - apiGroups:
-    - mysql.oracle.com
-    resources:
-    - mysqlbackups
-    verbs:
-    - create
+  - apiGroups: ["mysql.oracle.com"]
+    resources: ["mysqlbackups"]
+    verbs: ["create"]
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: ClusterRole
 metadata:
   name: mysql-agent
 rules:
-  - apiGroups:
-    - ""
-    resources:
-    - pods
+  - apiGroups: [""]
+    resources: ["pods"]
     verbs:
     - get
     - list
     - patch
     - update
     - watch
 
-  - apiGroups:
-    - ""
-    resources:
-    - secrets
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+
+  - apiGroups: [""]
+    resources: ["events"]
     verbs:
-    - get
+    - create
+    - update
+    - patch
 
-  - apiGroups:
-    - mysql.oracle.com
+  - apiGroups: ["mysql.oracle.com"]
     resources:
     - mysqlbackups
     - mysqlbackupschedules

mysql-operator/templates/02-rbac.yaml

@@ -20,26 +20,20 @@ metadata:
   name: mysql-operator{{ if .Values.operator.global }}{{ else}}
   namespace: {{ .Values.operator.namespace}}{{ end }}
 rules:
-  - apiGroups:
-    - ""
-    resources:
-    - pods
+  - apiGroups: [""]
+    resources: ["pods"]
     verbs:
     - get
     - list
     - patch
     - update
     - watch
 
-  - apiGroups:
-    - ""
-    resources:
-    - secrets
-    verbs:
-    - create
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["create"]
 
-  - apiGroups:
-    - ""
+  - apiGroups: [""]
     resources:
     - services
     {{- if hasPrefix "0.1" .Values.image.tag }}
@@ -51,10 +45,15 @@ rules:
     - list
     - watch
 
-  - apiGroups:
-    - apps
-    resources:
-    - statefulsets
+  - apiGroups: [""]
+    resources: ["events"]
+    verbs:
+    - create
+    - update
+    - patch
+
+  - apiGroups: ["apps"]
+    resources: ["statefulsets"]
     verbs:
     - create
     - get
@@ -63,8 +62,7 @@ rules:
     - update
     - watch
 
-  - apiGroups:
-    - mysql.oracle.com
+  - apiGroups: ["mysql.oracle.com"]
     resources:
     - mysqlbackups
     - mysqlbackupschedules
@@ -77,12 +75,9 @@ rules:
     - update
     - watch
 
-  - apiGroups:
-    - mysql.oracle.com
-    resources:
-    - mysqlbackups
-    verbs:
-    - create
+  - apiGroups: ["mysql.oracle.com"]
+    resources: ["mysqlbackups"]
+    verbs: ["create"]
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
@@ -91,26 +86,27 @@ metadata:
   name: mysql-agent{{ if .Values.operator.global }}{{ else}}
   namespace: {{ .Values.operator.namespace}}{{ end }}
 rules:
-  - apiGroups:
-    - ""
-    resources:
-    - pods
+  - apiGroups: [""]
+    resources: ["pods"]
     verbs:
     - get
     - list
     - patch
     - update
     - watch
 
-  - apiGroups:
-    - ""
-    resources:
-    - secrets
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get"]
+
+  - apiGroups: [""]
+    resources: ["events"]
     verbs:
-    - get
+    - create
+    - update
+    - patch
 
-  - apiGroups:
-    - mysql.oracle.com
+  - apiGroups: ["mysql.oracle.com"]
     resources:
     - mysqlbackups
     - mysqlbackupschedules