knmstate: Add missing rbac for webhook
@@ -85,6 +85,19 @@ metadata:
name: nmstate-handler
namespace: {{ .Namespace }}
rules:
+- apiGroups:
+ - certificates.k8s.io
+ resources:
+ - certificatesigningrequests
+ - certificatesigningrequests/approval
+ verbs:
+ - "*"
+- apiGroups:
+ - admissionregistration.k8s.io
+ resources:
+ - mutatingwebhookconfigurations
+ verbs:
+ - '*'
- apiGroups:
- nmstate.io
resources:
@@ -100,6 +113,12 @@ rules:
- get
- list
- watch
+- apiGroups:
+ - ""
+ resources:
+ - configmaps
+ verbs:
+ - "*"
{{ if .EnableSCC }}
---
apiVersion: security.openshift.io/v1
