Merge pull request #59 from skeeey/approve-cert

fix issue 3589
This commit is contained in:
OpenShift Merge Robot
2020-07-20 02:32:23 -04:00
committed by GitHub

View File

@@ -38,3 +38,8 @@ rules:
- apiGroups: ["register.open-cluster-management.io"]
resources: ["managedclusters/accept"]
verbs: ["update"]
# Allow hub to approve certificates that are signed by kubernetes.io/kube-apiserver-client (kube1.18.3+ needs)
- apiGroups: ["certificates.k8s.io"]
resources: ["signers"]
resourceNames: ["kubernetes.io/kube-apiserver-client"]
verbs: ["approve"]