From 28221f2c8b58bcdcc2e30ad33f8cb8b8fe46e91d Mon Sep 17 00:00:00 2001 From: Leonardo Cecchi Date: Wed, 7 May 2025 13:39:49 +0200 Subject: [PATCH] fix: role patching Closes: #318 Signed-off-by: Leonardo Cecchi --- internal/cnpgi/operator/reconciler.go | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/internal/cnpgi/operator/reconciler.go b/internal/cnpgi/operator/reconciler.go index 610b9a7..ec80f13 100644 --- a/internal/cnpgi/operator/reconciler.go +++ b/internal/cnpgi/operator/reconciler.go @@ -160,7 +160,13 @@ func (r ReconcilerImplementation) ensureRole( "rules", newRole.Rules, ) - return r.Client.Patch(ctx, newRole, client.MergeFrom(&role)) + oldRole := role.DeepCopy() + + // Apply to the role the new rules + role.Rules = newRole.Rules + + // Push it back to the API server + return r.Client.Patch(ctx, &role, client.MergeFrom(oldRole)) } func (r ReconcilerImplementation) ensureRoleBinding(