Fixes mittwald#75

u8sand · Mar 28, 2022 · f256631 · f256631
1 parent a1f86fe
commit f256631
Showing 1 changed file with 30 additions and 0 deletions.
diff --git a/deploy/helm-chart/kubernetes-secret-generator/templates/role.yaml b/deploy/helm-chart/kubernetes-secret-generator/templates/role.yaml
@@ -55,6 +55,21 @@ rules:
       - list
       - watch
       - update
+  # Permissions to access CRDs in this namespace if no cluster role is created.
+  - apiGroups:
+      - secretgenerator.mittwald.de
+    resources:
+      - basicauths
+      - basicauths/status
+      - sshkeypairs
+      - sshkeypairs/status
+      - stringsecrets
+      - stringsecrets/status
+    verbs:
+      - get
+      - list
+      - watch
+      - update
   {{- end -}}
 {{- else -}}
 kind: Role
@@ -99,6 +114,21 @@ rules:
       - list
       - watch
       - update
+  # Permissions to access CRDs in this namespace if no cluster role is created.
+  - apiGroups:
+      - secretgenerator.mittwald.de
+    resources:
+      - basicauths
+      - basicauths/status
+      - sshkeypairs
+      - sshkeypairs/status
+      - stringsecrets
+      - stringsecrets/status
+    verbs:
+      - get
+      - list
+      - watch
+      - update
   {{- end -}}
 {{- end -}}
 {{- end -}}