Extending RBAC Rules to allow scan hooks to create new scans (used by imperative-subsequent-scans)

rfelber · rfelber · commit ae8d65755461 · 2020-06-12T12:10:23.000+02:00
diff --git a/operator/controllers/execution/scan_controller.go b/operator/controllers/execution/scan_controller.go
@@ -977,7 +977,7 @@ func (r *ScanReconciler) createJobForHook(hook *executionv1.ScanCompletionHook,
 		{
 			APIGroups: []string{"execution.experimental.securecodebox.io"},
 			Resources: []string{"scans"},
-			Verbs:     []string{"get"},
+			Verbs:     []string{"get", "list", "create"},
 		},
 		{
 			APIGroups: []string{"execution.experimental.securecodebox.io"},

Original file line number	Diff line number	Diff line change
`@@ -977,7 +977,7 @@ func (r ScanReconciler) createJobForHook(hook executionv1.ScanCompletionHook,`
`977`	`977`	`{`
`978`	`978`	`APIGroups: []string{"execution.experimental.securecodebox.io"},`
`979`	`979`	`Resources: []string{"scans"},`
`980`		`- Verbs: []string{"get"},`
	`980`	`+ Verbs: []string{"get", "list", "create"},`
`981`	`981`	`},`
`982`	`982`	`{`
`983`	`983`	`APIGroups: []string{"execution.experimental.securecodebox.io"},`