From 2ffc76967e70e5654398654dd5e181ca6b076499 Mon Sep 17 00:00:00 2001
From: Doug Goldstein <doug.goldstein@rackspace.com>
Date: Mon, 24 Mar 2025 09:30:25 -0500
Subject: [PATCH] fix(argocd): deploying cert-manager webhooks requires
 kube-system

To deploy a cert-manager webhook we need to be able to create a
rolebinding in kube-system so access must be granted here.
---
 apps/appsets/understack.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apps/appsets/understack.yaml b/apps/appsets/understack.yaml
index 062d8009c..f028421a6 100644
--- a/apps/appsets/understack.yaml
+++ b/apps/appsets/understack.yaml
@@ -92,6 +92,8 @@ spec:
     server: '*'
   - namespace: 'global-secrets-sync'
     server: '*'
+  - namespace: 'kube-system'
+    server: '*'
   clusterResourceWhitelist:
   - group: '*'
     kind: '*'