Merge pull request #2651 from weaveworks/update-user-guide-for-oci-repos

Update user-guide to mention ocirepositories in permissions

Author: Robin Sonefors

website/docs/cluster-management/assets/rbac/wego-admin.yaml

@@ -30,7 +30,7 @@ rules:
     resources: ["helmreleases"]
     verbs: ["get", "list", "patch"]
   - apiGroups: ["source.toolkit.fluxcd.io"]
-    resources: ["buckets", "helmcharts", "gitrepositories", "helmrepositories"]
+    resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories" ]
     verbs: ["get", "list", "patch"]
   - apiGroups: [""]
     resources: ["events"]

website/docs/configuration/recommended-rbac-configuration.mdx

@@ -101,7 +101,7 @@ rules:
     resources: [ "helmreleases" ]
     verbs: [ "get", "list", "patch" ]
   - apiGroups: ["source.toolkit.fluxcd.io"]
-    resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories" ]
+    resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories" ]
     verbs: [ "get", "list", "patch" ]
   - apiGroups: [""]
     resources: ["events"]
@@ -127,7 +127,7 @@ rules:
     resources: [ "helmreleases" ]
     verbs: [ "get", "list" ]
   - apiGroups: ["source.toolkit.fluxcd.io"]
-    resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories" ]
+    resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories" ]
     verbs: [ "get", "list" ]
   - apiGroups: [""]
     resources: ["events"]

website/docs/configuration/user-permissions.mdx

@@ -27,7 +27,7 @@ rules:
   resources: [ "helmreleases" ]
   verbs: [ "get", "list", "patch" ]
 - apiGroups: ["source.toolkit.fluxcd.io"]
-  resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories" ]
+  resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories" ]
   verbs: [ "get", "list", "patch" ]
 - apiGroups: ["infra.contrib.fluxcd.io"]
   resources: ["terraforms"]
@@ -62,12 +62,12 @@ rules:
 
 The resources that Flux works with directly, including the one from TF-controller.
 
-| Api Group                   | Resources                                              | Permissions      |
-|-----------------------------|--------------------------------------------------------|------------------|
-| kustomize.toolkit.fluxcd.io | kustomizations                                         | get, list, patch |
-| helm.toolkit.fluxcd.io      | helmreleases                                           | get, list, patch |
-| source.toolkit.fluxcd.io    | buckets, helmcharts, gitrepositories, helmrepositories | get, list, patch |
-| infra.contrib.fluxcd.io     | terraforms                                             | get, list, patch |
+| Api Group                   | Resources                                                               | Permissions      |
+| --------------------------- | ----------------------------------------------------------------------- | ---------------- |
+| kustomize.toolkit.fluxcd.io | kustomizations                                                          | get, list, patch |
+| helm.toolkit.fluxcd.io      | helmreleases                                                            | get, list, patch |
+| source.toolkit.fluxcd.io    | buckets, helmcharts, gitrepositories, helmrepositories, ocirepositories | get, list, patch |
+| infra.contrib.fluxcd.io     | terraforms                                                              | get, list, patch |
 
 In order for Weave GitOps to be able to accurately display the state of Flux it
 needs to be able to query the [CRDs](https://fluxcd.io/docs/components/) that Flux uses. This is done using the

website/docs/guides/setting-up-dex.md

@@ -211,8 +211,8 @@ rules:
     resources: [ "helmreleases" ]
     verbs: [ "get", "list", "patch" ]
   - apiGroups: ["source.toolkit.fluxcd.io"]
-    resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories" ]
-    verbs: [ "get", "list", "patch" ]
+    resources: ["buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories"]
+    verbs: ["get", "list", "patch"]
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["get", "watch", "list"]