From b7289b51c752152ded68c09390192ce8404d02af Mon Sep 17 00:00:00 2001 From: Xun Jiang Date: Wed, 7 Jan 2026 01:15:11 +0800 Subject: [PATCH] Add Role, RoleBinding, ClusterRole, and ClusterRoleBinding in restore sequence. Ensure the RBAC resources are restored before pods. The change help to avoid pod starting error when pod depends on the RBAC resources, e.g., prometheus operator check whether it has enough permission before launching controller, if prometheus operator pod starts before RBAC resources created, it will not launch controllers, and it will not retry. https://github.com/prometheus-operator/prometheus-operator/blob/f7f07bcdfb415aea4c87c1fb0dafe00968ad5420/cmd/operator/main.go#L392-L400 Signed-off-by: Xun Jiang --- changelogs/unreleased/9474-blackpiglet | 1 + pkg/cmd/server/config/config.go | 4 ++++ 2 files changed, 5 insertions(+) create mode 100644 changelogs/unreleased/9474-blackpiglet diff --git a/changelogs/unreleased/9474-blackpiglet b/changelogs/unreleased/9474-blackpiglet new file mode 100644 index 000000000..9bfc11756 --- /dev/null +++ b/changelogs/unreleased/9474-blackpiglet @@ -0,0 +1 @@ +Add Role, RoleBinding, ClusterRole, and ClusterRoleBinding in restore sequence. \ No newline at end of file diff --git a/pkg/cmd/server/config/config.go b/pkg/cmd/server/config/config.go index 5adb9946b..e19086217 100644 --- a/pkg/cmd/server/config/config.go +++ b/pkg/cmd/server/config/config.go @@ -115,7 +115,11 @@ var ( "datauploads.velero.io", "persistentvolumes", "persistentvolumeclaims", + "clusterroles", + "roles", "serviceaccounts", + "clusterrolebindings", + "rolebindings", "secrets", "configmaps", "limitranges",