feat: allow write role to create namespaces

flanksource · Aug 27, 2024 · fd60dd6 · fd60dd6
1 parent b50bff8
commit fd60dd6
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/chart/templates/rbac.yaml b/chart/templates/rbac.yaml
@@ -150,6 +150,17 @@ rules:
   - apiGroups: ['']
     resources: ['configmaps', 'secrets']
     verbs: ['*']
+  {{- if .Values.serviceAccount.rbac.clusterRole}}
+  - apiGroups: ['']
+    resources: ['namespaces']
+    verbs:
+      - create
+      - patch
+      - get
+      - list
+      - update
+      - watch
+  {{- end }}
   - apiGroups:
       - 'configs.flanksource.com'
       - 'canaries.flanksource.com'