stacklok / toolhive / 26152919985

Build # 26152919985

Build Type

push

github

Committed by web-flow

Commit Message

Use `events.k8s.io` in registry-api Role (#5340)

After #5243, the operator's ClusterRole grants events only in the
`events.k8s.io` API group, but the per-MCPRegistry Role builder still
requested core `""/events`. Kubernetes RBAC escalation prevention
forbids the operator from granting a permission it does not itself
hold, so every MCPRegistry got stuck in phase `Failed`.

Switch the registry-api Role rule to `events.k8s.io/events` to match
the operator's own grant and the controller-runtime events API.

Fixes #5339

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Coverage Stats

64628 of 98700 relevant lines covered (65.48%)

63.1 hits per line

Source File

Press 'n' to go to next uncovered line, 'b' for previous

Source Not Available