Merge pull request #751 from kwoodson/kmskeyfix

Bug 2048214: Alibaba: adding permissions for using KMS encryption

Author: openshift-merge-robot

manifests/01-registry-credentials-request-alibaba.yaml

@@ -67,6 +67,12 @@ spec:
       - oss:UploadPart
       - oss:UploadPartCopy
       - oss:ListParts
+      - kms:GenerateDataKey
+      - kms:ListKeys
+      - kms:ListAlias
+      - kms:ListAliasByKeyId
+      - kms:DescribeKey
+      - kms:Decrypt
       resource: "*"
   serviceAccountNames:
   - cluster-image-registry-operator