Merge pull request #53 from m1kola/fix_rbac_for_clusterextensions

OPRUN-3291: Add roles for clusterextensions
openshift · May 1, 2024 · d998a86 · d998a86
2 parents 36b8875 + 485d2cc
commit d998a86
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/manifests/0000_51_olm_02_operator_clusterrole.yaml b/manifests/0000_51_olm_02_operator_clusterrole.yaml
@@ -197,3 +197,14 @@ rules:
     - list
     - watch
     - delete
+  # For validating admission policies and bindings to work
+  # this service account must have "get" permission on resources
+  # mentioned in paramKind of the policy and have "list" permission
+  # on the resources mentioned in paramRef of the binding
+  - apiGroups:
+    - olm.operatorframework.io
+    resources:
+    - clusterextensions
+    verbs:
+    - get
+    - list