From 5cfe7b0682e0fe4ccd561cf9d1fb36579736c647 Mon Sep 17 00:00:00 2001 From: Shubham Pampattiwar Date: Mon, 13 Jul 2026 13:43:11 -0700 Subject: [PATCH] Add pods/log RBAC for kubevirt datamover controller MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The kubevirt datamover controller now collects pod logs from terminated datamover pods to aid troubleshooting. This requires get access to the pods/log subresource. Synced from migtools/kubevirt-datamover-controller config/rbac/role.yaml via make update-kubevirt-datamover-manifests, with unwanted RBAC changes from make bundle manually reverted. Related: migtools/kubevirt-datamover-controller#52 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- bundle/manifests/oadp-operator.clusterserviceversion.yaml | 6 ++++++ config/kubevirt-datamover-controller_rbac/role.yaml | 6 ++++++ 2 files changed, 12 insertions(+) diff --git a/bundle/manifests/oadp-operator.clusterserviceversion.yaml b/bundle/manifests/oadp-operator.clusterserviceversion.yaml index a390c833ad3..f4346733b26 100644 --- a/bundle/manifests/oadp-operator.clusterserviceversion.yaml +++ b/bundle/manifests/oadp-operator.clusterserviceversion.yaml @@ -905,6 +905,12 @@ spec: - get - list - watch + - apiGroups: + - "" + resources: + - pods/log + verbs: + - get - apiGroups: - "" resources: diff --git a/config/kubevirt-datamover-controller_rbac/role.yaml b/config/kubevirt-datamover-controller_rbac/role.yaml index 3136e4d941f..0409a2c0ea3 100644 --- a/config/kubevirt-datamover-controller_rbac/role.yaml +++ b/config/kubevirt-datamover-controller_rbac/role.yaml @@ -37,6 +37,12 @@ rules: - get - list - watch +- apiGroups: + - "" + resources: + - pods/log + verbs: + - get - apiGroups: - "" resources: