diff --git a/charts/kueue/templates/rbac/role.yaml b/charts/kueue/templates/rbac/role.yaml index f860c94c45..e5ba9104c9 100644 --- a/charts/kueue/templates/rbac/role.yaml +++ b/charts/kueue/templates/rbac/role.yaml @@ -78,6 +78,15 @@ rules: - list - update - watch + - apiGroups: + - admissionregistration.k8s.io + resources: + - validatingadmissionpolicies + - validatingadmissionpolicybindings + verbs: + - get + - list + - watch - apiGroups: - autoscaling.x-k8s.io resources: diff --git a/config/components/rbac/role.yaml b/config/components/rbac/role.yaml index d30ccd5318..d708ec0799 100644 --- a/config/components/rbac/role.yaml +++ b/config/components/rbac/role.yaml @@ -77,6 +77,15 @@ rules: - list - update - watch +- apiGroups: + - admissionregistration.k8s.io + resources: + - validatingadmissionpolicies + - validatingadmissionpolicybindings + verbs: + - get + - list + - watch - apiGroups: - autoscaling.x-k8s.io resources: diff --git a/pkg/util/cert/cert.go b/pkg/util/cert/cert.go index d63a3d6529..3c3ee16d57 100644 --- a/pkg/util/cert/cert.go +++ b/pkg/util/cert/cert.go @@ -38,6 +38,8 @@ const ( // +kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;update // +kubebuilder:rbac:groups="admissionregistration.k8s.io",resources=mutatingwebhookconfigurations,verbs=get;list;watch;update // +kubebuilder:rbac:groups="admissionregistration.k8s.io",resources=validatingwebhookconfigurations,verbs=get;list;watch;update +// +kubebuilder:rbac:groups="admissionregistration.k8s.io",resources=validatingadmissionpolicies,verbs=get;list;watch +// +kubebuilder:rbac:groups="admissionregistration.k8s.io",resources=validatingadmissionpolicybindings,verbs=get;list;watch // ManageCerts creates all certs for webhooks. This function is called from main.go. func ManageCerts(mgr ctrl.Manager, cfg config.Configuration, setupFinished chan struct{}) error {