From 0e0f394066a0945f0949465edf3fefd2a753db82 Mon Sep 17 00:00:00 2001
From: Marek Schmidt <maschmid@redhat.com>
Date: Tue, 21 Jul 2026 15:24:33 +0200
Subject: [PATCH] update role

---
 config/rbac/role.yaml          |  8 +++++++
 rook-kafka-connection-setup.sh | 40 +++++++++++++++++-----------------
 2 files changed, 28 insertions(+), 20 deletions(-)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index e94fc84..c57dba4 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -13,6 +13,14 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - objectbucket.io
+  resources:
+  - objectbucketclaims
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - sources.functions.dev
   resources:
diff --git a/rook-kafka-connection-setup.sh b/rook-kafka-connection-setup.sh
index 1192110..692ded1 100755
--- a/rook-kafka-connection-setup.sh
+++ b/rook-kafka-connection-setup.sh
@@ -114,29 +114,29 @@ oc wait --for=condition=Ready kafkauser/objectbucket-notifications-adapter-user
 #      --from-literal=user.key="${rgw_kafka_userkey}"
 
 # Patch the cephObjectStores reconcileStrategy to Init so that it allows us adding the additionalVolumeMounts
-oc patch storagecluster ocs-storagecluster -n openshift-storage \
-  --type=merge \
-  -p '{"spec":{"managedResources":{"cephObjectStores":{"reconcileStrategy":"init"}}}}'
+#oc patch storagecluster ocs-storagecluster -n openshift-storage \
+#  --type=merge \
+#  -p '{"spec":{"managedResources":{"cephObjectStores":{"reconcileStrategy":"init"}}}}'
 
-echo "Sleeping for 10s to let the StorageCluster update the reconcileStrategy"
-sleep 10
+#echo "Sleeping for 10s to let the StorageCluster update the reconcileStrategy"
+#sleep 10
 
 # Mount the Kafka Secret
-cat <<EOF | oc apply -f -
-apiVersion: ceph.rook.io/v1
-kind: CephObjectStore
-metadata:
-  name: ocs-storagecluster-cephobjectstore
-  namespace: openshift-storage
-spec:
-  gateway:
-    additionalVolumeMounts:
-      - subPath: ${notification_kafka_user}-kafka
-        volumeSource:
-          secret:
-            secretName: ${notification_kafka_user}-kafka
-            defaultMode: 0644
-EOF
+#cat <<EOF | oc apply -f -
+#apiVersion: ceph.rook.io/v1
+#kind: CephObjectStore
+#metadata:
+#  name: ocs-storagecluster-cephobjectstore
+#  namespace: openshift-storage
+#spec:
+#  gateway:
+#    additionalVolumeMounts:
+#      - subPath: ${notification_kafka_user}-kafka
+#        volumeSource:
+#          secret:
+#            secretName: ${notification_kafka_user}-kafka
+#            defaultMode: 0644
+#EOF
 
 #oc delete secret --namespace openshift-storage "${notification_kafka_user}" 2>/dev/null || true
 #oc create secret --namespace openshift-storage generic "${notification_kafka_user}" \