Allow work agent to create subjectaccessreviews (open-cluster-managem…

…ent-io#273) Signed-off-by: zhujian <jiazhu@redhat.com> Signed-off-by: zhujian <jiazhu@redhat.com>
TomerFi · Sep 15, 2022 · 3d0b5cd · 3d0b5cd
1 parent ca32de7
commit 3d0b5cd
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/manifests/klusterlet/managed/klusterlet-work-clusterrole.yaml b/manifests/klusterlet/managed/klusterlet-work-clusterrole.yaml
@@ -15,3 +15,7 @@ rules:
 - apiGroups: ["work.open-cluster-management.io"]
   resources: ["appliedmanifestworks/finalizers"]
   verbs: ["update"]
+# Allow agent to create subjectaccessreviews
+- apiGroups: ["authorization.k8s.io"]
+  resources: ["subjectaccessreviews"]
+  verbs: ["create"]