Fixes #75 (#76)

* Apply #59 when rbac.clusterRole is false * Fixes #75
mittwald · Apr 28, 2022 · b6aa929 · b6aa929
1 parent e42b1a8
commit b6aa929
Showing 1 changed file with 32 additions and 0 deletions.
diff --git a/deploy/helm-chart/kubernetes-secret-generator/templates/role.yaml b/deploy/helm-chart/kubernetes-secret-generator/templates/role.yaml
@@ -49,6 +49,22 @@ rules:
       - ""
     resources:
       - secrets
+    verbs:
+      - get
+      - create
+      - list
+      - watch
+      - update
+  # Permissions to access CRDs in this namespace if no cluster role is created.
+  - apiGroups:
+      - secretgenerator.mittwald.de
+    resources:
+      - basicauths
+      - basicauths/status
+      - sshkeypairs
+      - sshkeypairs/status
+      - stringsecrets
+      - stringsecrets/status
     verbs:
       - get
       - list
@@ -92,6 +108,22 @@ rules:
       - ""
     resources:
       - secrets
+    verbs:
+      - get
+      - create
+      - list
+      - watch
+      - update
+  # Permissions to access CRDs in this namespace if no cluster role is created.
+  - apiGroups:
+      - secretgenerator.mittwald.de
+    resources:
+      - basicauths
+      - basicauths/status
+      - sshkeypairs
+      - sshkeypairs/status
+      - stringsecrets
+      - stringsecrets/status
     verbs:
       - get
       - list