From 520fbfb2e4e6daea9011788d05d665988fdd0343 Mon Sep 17 00:00:00 2001
From: mattia <mattia@hidora.io>
Date: Wed, 4 Jun 2025 15:57:12 +0200
Subject: [PATCH] Add RBAC rules to allow portforward in kubevirt for SSH via
 virtctl

Signed-off-by: mattia <mattia@hidora.io>
---
 packages/apps/tenant/templates/tenant.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/packages/apps/tenant/templates/tenant.yaml b/packages/apps/tenant/templates/tenant.yaml
index b9e1e497..e46b8f78 100644
--- a/packages/apps/tenant/templates/tenant.yaml
+++ b/packages/apps/tenant/templates/tenant.yaml
@@ -184,6 +184,12 @@ rules:
     verbs:
     - get
     - list
+  - apiGroups: ["subresources.kubevirt.io"]
+    resources:
+      - virtualmachineinstances/portforward
+    verbs:
+      - get
+      - update
   - apiGroups:
     - cozystack.io
     resources:
@@ -253,6 +259,12 @@ rules:
     verbs:
     - get
     - list
+  - apiGroups: ["subresources.kubevirt.io"]
+    resources:
+      - virtualmachineinstances/portforward
+    verbs:
+      - get
+      - update
   - apiGroups: ["apps.cozystack.io"]
     resources:
     - buckets
@@ -349,6 +361,12 @@ rules:
     verbs:
     - get
     - list
+  - apiGroups: ["subresources.kubevirt.io"]
+    resources:
+      - virtualmachineinstances/portforward
+    verbs:
+      - get
+      - update
   - apiGroups: ["apps.cozystack.io"]
     resources:
     - '*'