From 9c64952e3bd1049f7f3713609a38d915f5ed8adb Mon Sep 17 00:00:00 2001
From: Luca BRUNO <luca.bruno@coreos.com>
Date: Mon, 30 Sep 2019 18:26:02 +0000
Subject: [PATCH] openshift/rbac: allow project owners to cancel-builds

This tweaks project-owners RBAC to allow updating a build, in order
to make `cancel-build` work.

Ref: https://pagure.io/fedora-infrastructure/issue/8005
Signed-off-by: Luca BRUNO <luca.bruno@coreos.com>
---
 roles/openshift/project/templates/role-appowners.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/roles/openshift/project/templates/role-appowners.yml b/roles/openshift/project/templates/role-appowners.yml
index bb4db5d9ee..3cb94c5428 100644
--- a/roles/openshift/project/templates/role-appowners.yml
+++ b/roles/openshift/project/templates/role-appowners.yml
@@ -79,8 +79,10 @@ rules:
   attributeRestrictions: null
   resources:
   - buildconfigs/instantiate
+  - builds
   verbs:
   - create
+  - update
 - apiGroups:
   - "*"
   attributeRestrictions: null