Updating SA permissions for nonResourceURLs

crobby · Aug 9, 2023 · 86330c6 · 86330c6
1 parent 4ae2d58
commit 86330c6
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/cleanup/ad-guid-unmigration.yaml b/cleanup/ad-guid-unmigration.yaml
@@ -8,6 +8,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: cattle-cleanup-binding
+  namespace: default
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -59,10 +60,15 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: cattle-cleanup-role
+  namespace: default
 rules:
   - apiGroups:
       - '*'
     resources:
       - '*'
     verbs:
       - '*'
+  - nonResourceURLs:
+      - '*'
+    verbs:
+      - '*'