diff --git a/config/core/roles/controller-clusterroles.yaml b/config/core/roles/controller-clusterroles.yaml index 00292b90c..0f98deef3 100644 --- a/config/core/roles/controller-clusterroles.yaml +++ b/config/core/roles/controller-clusterroles.yaml @@ -64,11 +64,13 @@ rules: - "list" - "watch" - # PingSource controller manipulates Deployment owner reference + # PingSource and EventTransform controllers manipulate Deployment and ConfigMap owner reference - apiGroups: - "apps" + - "" resources: - "deployments/finalizers" + - "configmaps/finalizers" verbs: - "update" @@ -132,6 +134,23 @@ rules: resources: - "brokers/finalizers" - "triggers/finalizers" + - "eventtransforms/finalizers" + verbs: + - "update" + + # EventTransform controller manipulates SinkBinding owner reference + - apiGroups: + - "sources.knative.dev" + resources: + - "sinkbindings/finalizers" + verbs: + - "update" + + # EventTransform controller manipulates Service owner reference + - apiGroups: + - "" + resources: + - "services/finalizers" verbs: - "update" @@ -237,6 +256,14 @@ rules: - "patch" - "watch" + # EventTransform controller manipulates Certificate owner reference + - apiGroups: + - "cert-manager.io" + resources: + - "certificates/finalizers" + verbs: + - "update" + - apiGroups: - "acme.cert-manager.io" resources: