From 49f08c4c5247b2694a784de4298fd633d20acffc Mon Sep 17 00:00:00 2001
From: smg247 <smg247@users.noreply.github.com>
Date: Wed, 1 Nov 2023 10:59:47 -0400
Subject: [PATCH] additional role for ci-staging ci-operator SA

---
 .../staging/admin_ci-operator_rbac.yaml            | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml b/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
index 3a34f54d0f8f7..dd72799d1d8ea 100644
--- a/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
+++ b/clusters/build-clusters/common/ci-operator/staging/admin_ci-operator_rbac.yaml
@@ -204,3 +204,17 @@ items:
   - kind: ServiceAccount
     name: ci-operator
     namespace: ci-staging
+
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1
+  metadata:
+    name: secret-reader-to-ci-operator-staging
+    namespace: test-credentials
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: Role
+    name: secret-reader
+  subjects:
+  - kind: ServiceAccount
+    name: ci-operator
+    namespace: ci-staging