From 86330c6e96d90aae20211736dac9fb5040e9c40e Mon Sep 17 00:00:00 2001
From: Chad Roberts <chad.roberts@suse.com>
Date: Wed, 9 Aug 2023 17:09:05 -0400
Subject: [PATCH] Updating SA permissions for nonResourceURLs

---
 cleanup/ad-guid-unmigration.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cleanup/ad-guid-unmigration.yaml b/cleanup/ad-guid-unmigration.yaml
index 9b116c5e4b4..c7a7bffb6a7 100644
--- a/cleanup/ad-guid-unmigration.yaml
+++ b/cleanup/ad-guid-unmigration.yaml
@@ -8,6 +8,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: cattle-cleanup-binding
+  namespace: default
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
@@ -59,6 +60,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: cattle-cleanup-role
+  namespace: default
 rules:
   - apiGroups:
       - '*'
@@ -66,3 +68,7 @@ rules:
       - '*'
     verbs:
       - '*'
+  - nonResourceURLs:
+      - '*'
+    verbs:
+      - '*'