Skip to content

Commit 246d806

Browse files
authored
Merge pull request #9005 from zalando-incubator/role-sync-controller-clusterroles-bindings
role-sync: Add missing RBAC permissions
2 parents b23d8e6 + 32b9541 commit 246d806

File tree

1 file changed

+8
-0
lines changed
  • cluster/manifests/role-sync-controller

1 file changed

+8
-0
lines changed

cluster/manifests/role-sync-controller/rbac.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,14 @@ rules:
2424
- "get"
2525
- "create"
2626
- "update"
27+
# Allow the controller to list clusterrolebindings
28+
- apiGroups:
29+
- rbac.authorization.k8s.io
30+
resources:
31+
- "clusterrolebindings"
32+
- "clusterroles"
33+
verbs:
34+
- "list"
2735
# Allow the controller to manage roles based on reading Secrets
2836
- apiGroups:
2937
- ""

0 commit comments

Comments
 (0)