[gobbq]

Event resource permission is missing, operator logs as follows:

ref issue #119

[RockteMQ-AI]

Summary

Adds missing RBAC permissions for Kubernetes events resource (create and patch verbs) to both the deploy manifest (role.yaml) and the kubebuilder marker in main.go.

This is a correct and minimal fix — the operator needs to create Event resources for status reporting, and the RBAC rules were missing this permission, causing the operator to log errors when attempting to publish events.

LGTM.

---

Automated review by github-manager-bot

[RockteMQ-AI]

Issue Evaluation

Category: bug | Status: Confirmed

The operator's RBAC configuration is missing the events resource permission. Without it, the operator cannot create or update Kubernetes Events, which are used for observability and debugging.

Root Cause: The ClusterRole definition does not include events in its resources list. When the operator attempts to record events (e.g., during reconciliation), the Kubernetes API server rejects the request with a forbidden error.

Fix: Add events to the ClusterRole's resources list:

- apiGroups: [""]
  resources: ["events"]
  verbs: ["create", "get", "list", "watch", "update", "patch"]

Note: This issue has been open since Dec 2022 and marked stale. Related to #119. The fix is straightforward.

---

Automated evaluation by github-manager