diff --git a/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml b/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml index e4fecb0ef..47ed472bf 100644 --- a/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml +++ b/manifests/cluster-manager/cluster-manager-registration-clusterrole.yaml @@ -38,3 +38,7 @@ rules: - apiGroups: ["cluster.open-cluster-management.io"] resources: ["managedclusters/status"] verbs: ["update", "patch"] +# Allow hub to monitor manifestworks +- apiGroups: ["work.open-cluster-management.io"] + resources: ["manifestworks"] + verbs: ["get", "list", "watch"] diff --git a/pkg/operators/clustermanager/bindata/bindata.go b/pkg/operators/clustermanager/bindata/bindata.go index 1396af6b2..bc8bc5ff0 100644 --- a/pkg/operators/clustermanager/bindata/bindata.go +++ b/pkg/operators/clustermanager/bindata/bindata.go @@ -582,6 +582,10 @@ rules: - apiGroups: ["cluster.open-cluster-management.io"] resources: ["managedclusters/status"] verbs: ["update", "patch"] +# Allow hub to monitor manifestworks +- apiGroups: ["work.open-cluster-management.io"] + resources: ["manifestworks"] + verbs: ["get", "list", "watch"] `) func manifestsClusterManagerClusterManagerRegistrationClusterroleYamlBytes() ([]byte, error) {