From 455700b20f9f7769e76752145e7f80267919d9e6 Mon Sep 17 00:00:00 2001
From: smg247 <smg247@users.noreply.github.com>
Date: Wed, 1 Nov 2023 06:32:28 -0400
Subject: [PATCH] additional role for ci-staging ci-operator SA

---
 .../staging/admin_ci-operator_rbac.yaml           | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml b/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
index 3a34f54d0f8f7..9ee72c29a81eb 100644
--- a/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
+++ b/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
@@ -204,3 +204,18 @@ items:
   - kind: ServiceAccount
     name: ci-operator
     namespace: ci-staging
+
+
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1
+  metadata:
+    name: secret-reader-to-ci-operator
+    namespace: test-credentials
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: Role
+    name: secret-reader
+  subjects:
+  - kind: ServiceAccount
+    name: ci-operator
+    namespace: ci-staging