Allow porch-server to read APIService objects

nokia · Aug 22, 2024 · 6b75964 · 6b75964
1 parent 06ca132
commit 6b75964
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/deployments/porch/5-rbac.yaml b/deployments/porch/5-rbac.yaml
@@ -36,6 +36,9 @@ rules:
   - apiGroups: ["config.porch.kpt.dev"]
     resources: ["packagerevs", "packagerevs/status"]
     verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+  - apiGroups: ["apiregistration.k8s.io"]
+    resources: ["apiservices"]
+    verbs: ["get", "watch", "list"]
   # Needed for priority and fairness
   - apiGroups: ["flowcontrol.apiserver.k8s.io"]
     resources: ["flowschemas", "prioritylevelconfigurations"]