From d2acc8ae028cb672521e4f6cd5e0b7a329887df2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christoph=20St=C3=A4bler?= <cstabler@redhat.com>
Date: Fri, 6 Feb 2026 13:18:05 +0100
Subject: [PATCH] Fix: Allow to manage HTTPScaledObjects for KEDA deployer

---
 config/rbac/role.yaml                      | 12 ++++++++++++
 internal/controller/function_controller.go |  1 +
 2 files changed, 13 insertions(+)

diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 8b2cea5..14949bf 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -68,6 +68,18 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - http.keda.sh
+  resources:
+  - httpscaledobjects
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - rbac.authorization.k8s.io
   resources:
diff --git a/internal/controller/function_controller.go b/internal/controller/function_controller.go
index 0944966..5367039 100644
--- a/internal/controller/function_controller.go
+++ b/internal/controller/function_controller.go
@@ -66,6 +66,7 @@ type FunctionReconciler struct {
 // +kubebuilder:rbac:groups=tekton.dev,resources=pipelines;pipelineruns,verbs=get;list;watch;create;update;patch;delete
 // +kubebuilder:rbac:groups=tekton.dev,resources=taskruns,verbs=get;list;watch
 // +kubebuilder:rbac:groups=rbac.authorization.k8s.io,resources=rolebindings,verbs=get;list;watch;create;update;patch;delete
+// +kubebuilder:rbac:groups=http.keda.sh,resources=httpscaledobjects,verbs=get;list;watch;create;update;patch;delete
 
 // Reconcile a Function with status update
 func (r *FunctionReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {