diff --git a/components/notebook-controller/config/rbac/role.yaml b/components/notebook-controller/config/rbac/role.yaml index 51b6e04f..7273f3ab 100644 --- a/components/notebook-controller/config/rbac/role.yaml +++ b/components/notebook-controller/config/rbac/role.yaml @@ -19,6 +19,7 @@ rules: - create - get - list + - patch - watch - apiGroups: - "" diff --git a/components/notebook-controller/controllers/notebook_controller.go b/components/notebook-controller/controllers/notebook_controller.go index c2ba19f2..849b777c 100644 --- a/components/notebook-controller/controllers/notebook_controller.go +++ b/components/notebook-controller/controllers/notebook_controller.go @@ -79,7 +79,7 @@ type NotebookReconciler struct { } // +kubebuilder:rbac:groups=core,resources=pods,verbs=get;list;watch -// +kubebuilder:rbac:groups=core,resources=events,verbs=get;list;watch;create +// +kubebuilder:rbac:groups=core,resources=events,verbs=get;list;watch;create;patch // +kubebuilder:rbac:groups=core,resources=services,verbs="*" // +kubebuilder:rbac:groups=apps,resources=statefulsets,verbs="*" // +kubebuilder:rbac:groups=kubeflow.org,resources=notebooks;notebooks/status;notebooks/finalizers,verbs="*"