Add serviceclaims/status rights to ControlPlane (#40)

On application namespace creation graph `serviceclaims/status` rights to ControlPlane's service account Signed-off-by: Francesco Ilario <[email protected]>
primaza · Aug 10, 2023 · 536bbca · 536bbca
1 parent 556c058
commit 536bbca
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/scripts/src/primazactl/kube/roles/primazaroles.py b/scripts/src/primazactl/kube/roles/primazaroles.py
@@ -52,6 +52,10 @@ def get_primaza_namespace_role(role_name: str,
                 resources=["configmaps"],
                 verbs=["get", "list", "update", "delete"],
                 resource_names=["primaza-agentapp-config"]),
+            client.V1PolicyRule(
+                api_groups=["primaza.io"],
+                resources=["serviceclaims/status"],
+                verbs=["get", "update"]),
             # pull synchronization strategy
             client.V1PolicyRule(
                 api_groups=["primaza.io"],