From 5da0de710b47f47cec634e5f9ae453f2b3ef3094 Mon Sep 17 00:00:00 2001 From: Luke Policinski Date: Fri, 3 Jul 2026 12:55:55 -0400 Subject: [PATCH] feature: daemonset rbac for release channel reconcile The api reconciles workload image tags when switching release channels; game-server-node-connector (and the nvidia variant) are DaemonSets, so the server-creator role needs daemonset get/patch. Scoped via resourceNames to just the two connector daemonsets since they run privileged with hostPath mounts. Co-Authored-By: Claude Fable 5 --- base/api/rbac/role.yaml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/base/api/rbac/role.yaml b/base/api/rbac/role.yaml index db70883..c6ed162 100644 --- a/base/api/rbac/role.yaml +++ b/base/api/rbac/role.yaml @@ -96,4 +96,14 @@ rules: - list - watch - patch - - delete \ No newline at end of file + - delete + - apiGroups: + - 'apps' + resources: + - daemonsets + resourceNames: + - game-server-node-connector + - game-server-node-connector-nvidia + verbs: + - get + - patch \ No newline at end of file