(flink-kubernetes-operator) branch main updated: [FLINK-38552] Fix FlinkStateSnapshot when operator's namespace not in watchNamespaces

[gyfora]

This is an automated email from the ASF dual-hosted git repository.

gyfora pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/flink-kubernetes-operator.git


The following commit(s) were added to refs/heads/main by this push:
     new a2bbbb4b [FLINK-38552] Fix FlinkStateSnapshot when operator's 
namespace not in watchNamespaces
a2bbbb4b is described below

commit a2bbbb4be1db5fd3704b8d62d166e54a993ad769
Author: Maksim Aniskov <maksimanis...@gmail.com>
AuthorDate: Tue Nov 4 08:41:06 2025 +0000

    [FLINK-38552] Fix FlinkStateSnapshot when operator's namespace not in 
watchNamespaces
---
 helm/flink-kubernetes-operator/templates/rbac/role.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/helm/flink-kubernetes-operator/templates/rbac/role.yaml 
b/helm/flink-kubernetes-operator/templates/rbac/role.yaml
index e9653f52..e333e142 100644
--- a/helm/flink-kubernetes-operator/templates/rbac/role.yaml
+++ b/helm/flink-kubernetes-operator/templates/rbac/role.yaml
@@ -30,7 +30,7 @@ metadata:
     {{- include "flink-operator.labels" $ | nindent 4 }}
 {{- template "flink-operator.rbacRules" $ }}
 {{- end }}
-{{- /* Give operator the ability to operate on leases in the release namespace 
*/ -}}
+{{- /* Give operator the ability to operate on leases in the release namespace 
and check presence of FlinkStateSnapshot CRD */ -}}
 {{- if not (has .Release.Namespace .Values.watchNamespaces) }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -53,6 +53,12 @@ rules:
       - update
       - patch
       - delete
+  - apiGroups:
+      - flink.apache.org
+    resources:
+      - flinkstatesnapshots
+    verbs:
+      - list
 {{- end }}
 {{- end }}
 {{- end }}