Merge pull request #993 from pivotal/webhook-rbac

Support OwnerReferencesPermissionEnforcement admission controller ena…
buildpacks-community · Jul 18, 2022 · b7b98e2 · b7b98e2
2 parents 3f76cd0 + 8e3f8be
commit b7b98e2
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/config/webhookrole.yaml b/config/webhookrole.yaml
@@ -75,6 +75,16 @@ rules:
   - "kpack"
   verbs:
   - get
+- apiGroups:
+  - ""
+  resources:
+  - "namespaces/finalizers"
+  verbs:
+  - "update"
+  # The webhook configured the namespace as the OwnerRef on various cluster-scoped resources,
+  # which requires we can update the system namespace finalizers.
+  resourceNames:
+  - "kpack"
 - apiGroups:
   - "admissionregistration.k8s.io"
   resources:
@@ -83,6 +93,7 @@ rules:
   - "defaults.webhook.kpack.io"
   verbs:
   - update
+  - delete
 - apiGroups:
   - "admissionregistration.k8s.io"
   resources:
@@ -99,6 +110,7 @@ rules:
   - "validation.webhook.kpack.io"
   verbs:
   - update
+  - delete
 - apiGroups:
   - "admissionregistration.k8s.io"
   resources: