From 6e8e00028aa3679ece2fa49d74f1f4791e570597 Mon Sep 17 00:00:00 2001 From: Andrew Kenworthy Date: Mon, 29 Jun 2026 15:25:59 +0200 Subject: [PATCH 1/3] fix:re-add rbac permissions required by SDP on openshift --- deploy/helm/listener-operator/templates/roles.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deploy/helm/listener-operator/templates/roles.yaml b/deploy/helm/listener-operator/templates/roles.yaml index 23aee317..d8872880 100644 --- a/deploy/helm/listener-operator/templates/roles.yaml +++ b/deploy/helm/listener-operator/templates/roles.yaml @@ -61,6 +61,10 @@ rules: - get - list - watch + # Write permissions required by e.g. SDP on Openshift + - create + - update + - patch # Service created per Listener. Applied via SSA and tracked for orphan cleanup. - apiGroups: - "" From dcbf7cc7c1c76519b85ed299382ba4427b19e8b6 Mon Sep 17 00:00:00 2001 From: Andrew Kenworthy Date: Mon, 29 Jun 2026 15:28:41 +0200 Subject: [PATCH 2/3] changelog --- CHANGELOG.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d1e3fa84..dd514782 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file. ## [Unreleased] -- Document Helm deployed RBAC permissions and remove unnecessary permissions ([#380]). +- Document Helm deployed RBAC permissions and remove unnecessary permissions ([#380], [#397]). ### Fixed @@ -14,6 +14,7 @@ All notable changes to this project will be documented in this file. [#380]: https://github.com/stackabletech/listener-operator/pull/380 [#393]: https://github.com/stackabletech/listener-operator/pull/393 +[#397]: https://github.com/stackabletech/listener-operator/pull/397 ## [26.3.0] - 2026-03-16 From 873d2b183e70827affd76a247a741d7e803e4ff0 Mon Sep 17 00:00:00 2001 From: Andrew Kenworthy <1712947+adwk67@users.noreply.github.com> Date: Mon, 29 Jun 2026 15:51:27 +0200 Subject: [PATCH 3/3] Update deploy/helm/listener-operator/templates/roles.yaml Co-authored-by: Nick <10092581+NickLarsenNZ@users.noreply.github.com> --- deploy/helm/listener-operator/templates/roles.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/deploy/helm/listener-operator/templates/roles.yaml b/deploy/helm/listener-operator/templates/roles.yaml index d8872880..9c5ebe57 100644 --- a/deploy/helm/listener-operator/templates/roles.yaml +++ b/deploy/helm/listener-operator/templates/roles.yaml @@ -61,7 +61,6 @@ rules: - get - list - watch - # Write permissions required by e.g. SDP on Openshift - create - update - patch