fix: grant provider profile secret rbac

2026-06-05 16:23:33 +08:00
parent aef9a66a11
commit 8099207353
2 changed files with 33 additions and 2 deletions
@@ -358,6 +358,30 @@ roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: agentrun-v01-mgr-runner-job-controller
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: agentrun-v01-mgr-provider-secret-manager
+  namespace: ${namespace}
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    resourceNames: ["agentrun-v01-provider-codex", "agentrun-v01-provider-deepseek", "agentrun-v01-provider-minimax-m3"]
+    verbs: ["get", "patch", "update"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: agentrun-v01-mgr-provider-secret-manager
+  namespace: ${namespace}
+subjects:
+  - kind: ServiceAccount
+    name: agentrun-v01-mgr
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: agentrun-v01-mgr-provider-secret-manager
 `;
 }

@@ -376,7 +400,7 @@ metadata:
 rules:
  - apiGroups: [""]
    resources: ["secrets"]
-    resourceNames: ["agentrun-v01-provider-codex", "agentrun-v01-provider-deepseek"]
+    resourceNames: ["agentrun-v01-provider-codex", "agentrun-v01-provider-deepseek", "agentrun-v01-provider-minimax-m3"]
    verbs: ["get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1