bootstrappolicy: add localaccessreview to AggregatedViewRoleName

openshift · Apr 24, 2024 · a135a99 · a135a99
1 parent 5f66eee
commit a135a99
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/bootstrappolicy/policy.go b/pkg/bootstrappolicy/policy.go
@@ -425,6 +425,9 @@ func GetOpenshiftBootstrapClusterRoles() []rbacv1.ClusterRole {
 
 				rbacv1helpers.NewRule(read...).Groups(templateGroup, legacyTemplateGroup).Resources("templates", "templateconfigs", "processedtemplates", "templateinstances").RuleOrDie(),
 
+				// after dropping unauthenticated groups
+				rbacv1helpers.NewRule("create").Groups(authzGroup, legacyAuthzGroup).Resources("localsubjectaccessreviews").RuleOrDie(),
+
 				// backwards compatibility
 				rbacv1helpers.NewRule(read...).Groups(buildGroup, legacyBuildGroup).Resources("buildlogs").RuleOrDie(),
 				rbacv1helpers.NewRule(read...).Groups(kapiGroup).Resources("resourcequotausages").RuleOrDie(),