Add 'use' permission for DWO SA when container build is enabled

Add 'use' permissions in addition to 'get' and 'update' to be added to the DevWorkspace Operator ServiceAccount when container build functionality is enabled. This is required due to changes in the DevWorkspace Operator in devfile/devworkspace-operator#954 Signed-off-by: Angel Misevski <[email protected]>
amisevsk · Nov 7, 2022 · 5232c43 · 5232c43
1 parent 349cb78
commit 5232c43
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/deploy/container-build/container_build.go b/pkg/deploy/container-build/container_build.go
@@ -170,7 +170,7 @@ func (cb *ContainerBuildReconciler) getDevWorkspaceSccPolicyRules(ctx *chetypes.
 		{
 			APIGroups:     []string{"security.openshift.io"},
 			Resources:     []string{"securitycontextconstraints"},
-			Verbs:         []string{"get", "update"},
+			Verbs:         []string{"get", "update", "use"},
 			ResourceNames: []string{ctx.CheCluster.Spec.DevEnvironments.ContainerBuildConfiguration.OpenShiftSecurityContextConstraint},
 		},
 	}