From a449aadb1f45dc018f0a9094f9f8257d59c543f2 Mon Sep 17 00:00:00 2001 From: Jian Zhang Date: Fri, 28 Nov 2025 16:18:52 +0800 Subject: [PATCH] Add PodDisruptionBudget permissions to cluster-olm-operator The cluster-olm-operator needs permissions to manage PodDisruptionBudgets as they are now part of the static operand assets for catalogd and operator-controller to ensure high availability during upgrades. This change adds the necessary RBAC permissions for the policy API group to create, update, patch, get, list, watch, and delete poddisruptionbudgets. Fixes: openshift/operator-framework-operator-controller#568 --- manifests/0000_51_olm_02_operator_clusterrole.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/manifests/0000_51_olm_02_operator_clusterrole.yaml b/manifests/0000_51_olm_02_operator_clusterrole.yaml index e8b19a14a..9a7d911e9 100644 --- a/manifests/0000_51_olm_02_operator_clusterrole.yaml +++ b/manifests/0000_51_olm_02_operator_clusterrole.yaml @@ -297,3 +297,15 @@ rules: - list - watch - delete + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - update + - patch + - get + - list + - watch + - delete