add true can-i check to make sure the operator has the permissions it…

… needs for clusterrole/binding creation (#70) part of fix for: kiali/kiali#3241
kiali · Aug 3, 2021 · 70dfa7d · 70dfa7d
1 parent ac441ec
commit 70dfa7d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/kiali-operator/templates/clusterrole.yaml b/kiali-operator/templates/clusterrole.yaml
@@ -97,6 +97,11 @@ rules:
   - patch
   - update
   - watch
+- apiGroups: ["authorization.k8s.io"]
+  resources:
+  - selfsubjectaccessreviews
+  verbs:
+  - list
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources:
   {{- if or (and (.Values.cr.create) (has "**" .Values.cr.spec.deployment.accessible_namespaces)) (.Values.clusterRoleCreator) }}