Allow administrator to list namespaces and manage RBACs and admission…

… webhooks
gardener · Aug 28, 2020 · 4c77bbf · 4c77bbf
1 parent e0a0b19
commit 4c77bbf
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/charts/gardener/controlplane/charts/application/templates/rbac-user.yaml b/charts/gardener/controlplane/charts/application/templates/rbac-user.yaml
@@ -22,6 +22,22 @@ rules:
   - namespaces
   verbs:
   - get
+  - list
+  - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  - clusterrolebindings
+  verbs:
+  - '*'
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  - validatingwebhookconfigurations
+  verbs:
+  - '*'
 
 # Aggregated cluster role specifying garden administrators.
 # IMPORTANT: You need to define a corresponding ClusterRoleBinding binding specific users