add true can-i check to make sure the operator has the permissions it…

… needs for clusterrole/binding creation part of fix for: kiali/kiali#3241
kiali · May 3, 2021 · 4b69e22 · 4b69e22
1 parent 87f89a0
commit 4b69e22
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/kiali-operator/templates/clusterrole.yaml b/kiali-operator/templates/clusterrole.yaml
@@ -97,6 +97,11 @@ rules:
   - patch
   - update
   - watch
+- apiGroups: ["authorization.k8s.io"]
+  resources:
+  - selfsubjectaccessreview
+  verbs:
+  - list
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources:
   {{- if or (and (.Values.cr.create) (has "**" .Values.cr.spec.deployment.accessible_namespaces)) (.Values.clusterRoleCreator) }}