Allow work agent to create subjectaccessreviews (#273)

Signed-off-by: zhujian <jiazhu@redhat.com>

Signed-off-by: zhujian <jiazhu@redhat.com>
This commit is contained in:
Jian Zhu
2022-09-15 09:16:53 +08:00
committed by GitHub
parent ca32de775b
commit 3d0b5cd219

View File

@@ -15,3 +15,7 @@ rules:
- apiGroups: ["work.open-cluster-management.io"]
resources: ["appliedmanifestworks/finalizers"]
verbs: ["update"]
# Allow agent to create subjectaccessreviews
- apiGroups: ["authorization.k8s.io"]
resources: ["subjectaccessreviews"]
verbs: ["create"]