Add proper OperatorConfig rbac permission so it can deploy a real ext…

…ernal-secrets helm-chart based operator
external-secrets · Nov 22, 2021 · ee344d8 · ee344d8
1 parent 0694458
commit ee344d8
Showing 1 changed file with 32 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -80,4 +80,36 @@ rules:
   - update
   - watch
 
+##
+## Custom rules needed by real helm chart operator to manage all operator resources)
+##
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - '*'
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  - clusterrolebindings
+  - roles
+  - rolebindings
+  verbs:
+  - '*'
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts
+  - services
+  verbs:
+  - '*'
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  verbs:
+  - '*'
+
 #+kubebuilder:scaffold:rules