From f4050570657e5088a3bce27ae3ed93c36d7e8bab Mon Sep 17 00:00:00 2001 From: Ryan Richard Date: Wed, 6 May 2026 09:36:38 -0700 Subject: [PATCH] give concierge read perm for mutatingadmissionpolicies and mutatingadmissionpolicybindings Signed-off-by: Ryan Richard --- deploy/concierge/rbac.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/concierge/rbac.yaml b/deploy/concierge/rbac.yaml index a4dc2fea0..54c6a6bb8 100644 --- a/deploy/concierge/rbac.yaml +++ b/deploy/concierge/rbac.yaml @@ -1,4 +1,4 @@ -#! Copyright 2020-2024 the Pinniped contributors. All Rights Reserved. +#! Copyright 2020-2026 the Pinniped contributors. All Rights Reserved. #! SPDX-License-Identifier: Apache-2.0 #@ load("@ytt:data", "data") @@ -19,7 +19,7 @@ rules: resources: [ apiservices ] verbs: [ get, list, patch, update, watch ] - apiGroups: [ admissionregistration.k8s.io ] - resources: [ validatingwebhookconfigurations, mutatingwebhookconfigurations, validatingadmissionpolicies, validatingadmissionpolicybindings ] + resources: [ validatingwebhookconfigurations, mutatingwebhookconfigurations, validatingadmissionpolicies, validatingadmissionpolicybindings, mutatingadmissionpolicies, mutatingadmissionpolicybindings ] verbs: [ get, list, watch ] - apiGroups: [ flowcontrol.apiserver.k8s.io ] resources: [ flowschemas, prioritylevelconfigurations ]